./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3006302820 <...> ATIME, "" [pid 6115] creat("./file0", 000) = 4 [pid 5073] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6121] <... mount resumed>) = 0 [pid 6120] <... mount resumed>) = 0 [pid 6115] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6121] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6120] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6115] <... futex resumed>) = 1 [pid 6112] <... futex resumed>) = 0 [ 162.354972][ T6120] loop5: detected capacity change from 0 to 1024 [ 162.376849][ T6121] loop1: detected capacity change from 0 to 1024 [ 162.383882][ T6119] loop4: detected capacity change from 0 to 1024 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./56/file1", [pid 6121] <... openat resumed>) = 3 [pid 6120] <... openat resumed>) = 3 [pid 6115] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6112] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] chdir("./file1") = 0 [pid 6120] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6121] chdir("./file1" [pid 6120] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6121] <... chdir resumed>) = 0 [pid 6120] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6113] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(AT_FDCWD, "./57/file1", [pid 5073] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6121] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6121] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = 0 [pid 6113] <... futex resumed>) = 1 [pid 5074] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6121] <... futex resumed>) = 1 [pid 6120] creat("./file0", 000 [pid 6117] <... futex resumed>) = 0 [pid 6113] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 6121] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] <... creat resumed>) = 4 [pid 6117] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... mount resumed>) = 0 [pid 6117] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6120] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6120] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6121] creat("./file0", 000 [pid 6119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6117] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6119] <... openat resumed>) = 3 [pid 5074] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5074] rmdir("./57/file1" [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... creat resumed>) = 4 [pid 6120] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6119] chdir("./file1" [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6121] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... chdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 6121] <... futex resumed>) = 1 [pid 6119] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6117] <... futex resumed>) = 0 [pid 6112] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] rmdir("./57" [pid 5073] rmdir("./56/file1" [pid 6121] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6117] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6121] <... futex resumed>) = 0 [pid 6119] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = 1 [pid 6112] <... futex resumed>) = 0 [pid 5073] getdents64(3, [pid 6121] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6119] <... futex resumed>) = 1 [pid 6117] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [ 162.455950][ T6115] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.466542][ T6115] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.480298][ T6115] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.490003][ T6115] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.496654][ T6120] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6119] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] <... futex resumed>) = 0 [pid 6112] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] mkdir("./58", 0777 [pid 5073] close(3 [pid 6114] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6119] <... futex resumed>) = 0 [pid 6114] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6112] <... mprotect resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] rmdir("./56" [pid 6119] creat("./file0", 000 [pid 6113] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6119] <... creat resumed>) = 4 [pid 6114] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6113] <... futex resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] mkdir("./57", 0777 [pid 6119] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6112] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6119] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6113] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... openat resumed>) = 3 [pid 6119] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6114] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6112] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6114] <... futex resumed>) = 0 [pid 6113] <... mprotect resumed>) = 0 [pid 6112] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6114] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6113] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6113] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6122]}, 88) = 6122 [pid 6113] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6113] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6122 attached [pid 6122] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6122] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6123 attached [ 162.517406][ T6121] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.527059][ T6115] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.556255][ T6115] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6122] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6117] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... clone3 resumed> => {parent_tid=[6123]}, 88) = 6123 [pid 6123] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6117] <... futex resumed>) = 0 [pid 6117] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6112] rt_sigprocmask(SIG_SETMASK, [], [pid 6123] <... rseq resumed>) = 0 [pid 6117] <... mmap resumed>) = 0x7eff81e8c000 [pid 6112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6123] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6117] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6112] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6123] rt_sigprocmask(SIG_SETMASK, [], [pid 6117] <... mprotect resumed>) = 0 [pid 6114] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6117] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6114] <... futex resumed>) = 0 [pid 6123] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6117] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6117] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6114] <... mmap resumed>) = 0x7eff81e8c000 [pid 6114] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [ 162.571180][ T6119] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.578627][ T6120] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.587086][ T6121] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6114] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... ioctl resumed>) = 0 [pid 6123] <... open resumed>) = 5 [pid 6117] <... clone3 resumed> => {parent_tid=[6124]}, 88) = 6124 [pid 6114] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6124 attached [pid 6123] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] rt_sigprocmask(SIG_SETMASK, [], [pid 6124] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6123] <... futex resumed>) = 1 [pid 6117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6114] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6112] <... futex resumed>) = 0 [pid 5074] close(3 [pid 5073] close(3 [pid 6124] <... rseq resumed>) = 0 [pid 6123] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6117] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] set_robust_list(0x7eff81eac9a0, 24 [pid 6117] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6115] <... write resumed>) = 53248 [pid 6117] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6125 attached [pid 6124] <... set_robust_list resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6125] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6124] rt_sigprocmask(SIG_SETMASK, [], [pid 6115] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... clone3 resumed> => {parent_tid=[6125]}, 88) = 6125 [pid 6125] <... rseq resumed>) = 0 [pid 6124] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6112] exit_group(0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6126 [pid 6125] set_robust_list(0x7eff81eac9a0, 24 [pid 6124] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6123] <... futex resumed>) = ? [pid 6112] <... exit_group resumed>) = ? [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6127 [pid 6114] rt_sigprocmask(SIG_SETMASK, [], [pid 6115] <... futex resumed>) = ? [pid 6114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6125] <... set_robust_list resumed>) = 0 [pid 6123] +++ exited with 0 +++ [pid 6115] +++ exited with 0 +++ [pid 6114] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] +++ exited with 0 +++ ./strace-static-x86_64: Process 6127 attached ./strace-static-x86_64: Process 6126 attached [pid 6125] rt_sigprocmask(SIG_SETMASK, [], [pid 6114] <... futex resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6127] set_robust_list(0x5555571ca6a0, 24 [pid 6126] set_robust_list(0x5555571ca6a0, 24 [pid 6125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6114] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... set_robust_list resumed>) = 0 [pid 6126] <... set_robust_list resumed>) = 0 [ 162.627309][ T6121] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.636006][ T6120] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.648633][ T6119] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.659080][ T6119] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.666741][ T6119] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6125] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6127] chdir("./57" [pid 6126] chdir("./58" [pid 6125] <... open resumed>) = 5 [pid 6117] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6127] <... chdir resumed>) = 0 [pid 6126] <... chdir resumed>) = 0 [pid 6125] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... openat resumed>) = 3 [pid 6127] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6125] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 6127] <... prctl resumed>) = 0 [pid 6126] <... prctl resumed>) = 0 [pid 6125] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] setpgid(0, 0 [pid 6126] setpgid(0, 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6127] <... setpgid resumed>) = 0 [pid 6126] <... setpgid resumed>) = 0 [pid 5071] getdents64(3, [pid 6127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6127] <... openat resumed>) = 3 [pid 6126] <... openat resumed>) = 3 [pid 6122] <... open resumed>) = 5 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6127] write(3, "1000", 4 [ 162.680547][ T6120] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.692516][ T6121] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.700821][ T6119] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6126] write(3, "1000", 4 [pid 6124] <... open resumed>) = 5 [pid 6122] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] <... write resumed>) = 4 [pid 6126] <... write resumed>) = 4 [pid 6127] close(3 [pid 6126] close(3 [pid 6122] <... futex resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] <... write resumed>) = 53248 [pid 5071] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6119] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6127] <... close resumed>) = 0 [pid 6126] <... close resumed>) = 0 [pid 6124] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = 0 [pid 6114] exit_group(0 [pid 5071] unlink("./58/binderfs" [pid 6114] <... exit_group resumed>) = ? [pid 6127] symlink("/dev/binderfs", "./binderfs" [pid 6126] symlink("/dev/binderfs", "./binderfs" [pid 6125] <... futex resumed>) = ? [pid 6124] <... futex resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6126] <... symlink resumed>) = 0 [pid 6125] +++ exited with 0 +++ [pid 6124] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] <... symlink resumed>) = 0 [pid 6126] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6127] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6127] <... futex resumed>) = 0 [pid 6126] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6127] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6127] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6126] <... mmap resumed>) = 0x7eff81ead000 [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6126] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6126] <... mprotect resumed>) = 0 [pid 6127] <... mmap resumed>) = 0x7eff81ead000 [pid 6126] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6127] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6126] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6127] <... mprotect resumed>) = 0 [pid 6126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6128 attached [], 8) = 0 [pid 6126] <... clone3 resumed> => {parent_tid=[6128]}, 88) = 6128 [ 162.744402][ T6120] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.751731][ T6120] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.756526][ T6119] hfsplus: request for non-existent node 16777216 in B*Tree [ 162.763138][ T6121] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6126] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6127] <... clone3 resumed> => {parent_tid=[6129]}, 88) = 6129 [pid 6126] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6129 attached [pid 6128] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6127] rt_sigprocmask(SIG_SETMASK, [], [pid 6126] <... futex resumed>) = 0 [pid 6129] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6128] <... rseq resumed>) = 0 [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6126] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6129] <... rseq resumed>) = 0 [pid 6128] set_robust_list(0x7eff81ecd9a0, 24 [pid 6127] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6129] set_robust_list(0x7eff81ecd9a0, 24 [pid 6128] <... set_robust_list resumed>) = 0 [pid 6127] <... futex resumed>) = 0 [pid 6129] <... set_robust_list resumed>) = 0 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], [pid 6127] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6129] rt_sigprocmask(SIG_SETMASK, [], [pid 6128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6128] memfd_create("syzkaller", 0 [pid 6129] memfd_create("syzkaller", 0 [pid 6128] <... memfd_create resumed>) = 3 [pid 6129] <... memfd_create resumed>) = 3 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6119] +++ exited with 0 +++ [pid 6114] +++ exited with 0 +++ [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6128] <... mmap resumed>) = 0x7eff79a00000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6129] <... mmap resumed>) = 0x7eff79a00000 [pid 5071] <... umount2 resumed>) = 0 [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6120] <... write resumed>) = 53248 [pid 5071] newfstatat(AT_FDCWD, "./58/file1", [pid 6120] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] exit_group(0 [pid 5075] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6120] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... openat resumed>) = 3 [pid 5071] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 162.791272][ T6121] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6122] <... futex resumed>) = ? [pid 6121] <... write resumed>) = 53248 [pid 6120] <... futex resumed>) = ? [pid 6113] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6121] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 6121] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6121] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6128] <... write resumed>) = 524288 [pid 6122] +++ exited with 0 +++ [pid 6120] +++ exited with 0 +++ [pid 6117] exit_group(0 [pid 6113] +++ exited with 0 +++ [pid 5075] newfstatat(AT_FDCWD, "./56/binderfs", [pid 5071] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6124] <... futex resumed>) = ? [pid 6121] <... futex resumed>) = ? [pid 6117] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6124] +++ exited with 0 +++ [pid 6121] +++ exited with 0 +++ [pid 6117] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5075] unlink("./56/binderfs" [pid 5071] <... openat resumed>) = 4 [pid 6129] <... write resumed>) = 524288 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5075] <... unlink resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5075] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6117, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5071] newfstatat(4, "", [pid 5072] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] munmap(0x7eff79a00000, 138412032 [pid 6128] munmap(0x7eff79a00000, 138412032 [pid 5076] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 6129] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6129] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6128] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6129] <... openat resumed>) = 4 [pid 6128] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 6129] ioctl(4, LOOP_SET_FD, 3 [pid 6128] <... openat resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./56/file1", [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(3, "", [pid 5071] close(4 [pid 5076] getdents64(3, [pid 5075] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5071] rmdir("./58/file1" [pid 5076] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5072] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 5076] newfstatat(AT_FDCWD, "./57/binderfs", [pid 5075] newfstatat(4, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(AT_FDCWD, "./56/binderfs", [pid 5071] close(3 [pid 5076] unlink("./57/binderfs" [pid 5075] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 6129] <... ioctl resumed>) = 0 [pid 6128] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] unlink("./56/binderfs" [pid 5076] <... unlink resumed>) = 0 [pid 5075] getdents64(4, [pid 5072] <... unlink resumed>) = 0 [pid 5071] rmdir("./58" [pid 5076] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./56/file1") = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./56") = 0 [pid 5071] mkdir("./59", 0777 [pid 5075] mkdir("./57", 0777 [pid 6129] close(3 [pid 6128] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6129] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6129] close(4) = 0 [pid 6128] close(3 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6129] mkdir("./file1", 0777 [pid 6128] <... close resumed>) = 0 [pid 6128] close(4 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6129] <... mkdir resumed>) = 0 [pid 6128] <... close resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6128] mkdir("./file1", 0777 [pid 5076] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6129] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5072] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./56/file1", [pid 6128] <... mkdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6129] <... mount resumed>) = 0 [pid 6128] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./57/file1", [pid 6129] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6129] <... openat resumed>) = 3 [pid 5076] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 6129] chdir("./file1" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] <... chdir resumed>) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(4, [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6129] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [ 162.871062][ T6129] loop2: detected capacity change from 0 to 1024 [ 162.881087][ T6128] loop3: detected capacity change from 0 to 1024 [pid 5076] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6129] <... futex resumed>) = 1 [pid 6127] <... futex resumed>) = 0 [pid 5076] close(4 [pid 6129] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 6129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] <... mount resumed>) = 0 [pid 6127] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] rmdir("./56/file1" [pid 6129] creat("./file0", 000 [pid 6127] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] rmdir("./57/file1" [pid 5072] <... rmdir resumed>) = 0 [pid 6129] <... creat resumed>) = 4 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 6129] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 5071] <... ioctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 6128] <... openat resumed>) = 3 [pid 5071] close(3 [pid 6127] <... futex resumed>) = 0 [pid 6127] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6129] <... futex resumed>) = 1 [pid 6129] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 6128] chdir("./file1" [pid 5071] <... close resumed>) = 0 [pid 6128] <... chdir resumed>) = 0 [pid 5076] close(3 [pid 5072] rmdir("./56" [pid 6128] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6128] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] rmdir("./57" [pid 5072] <... rmdir resumed>) = 0 [pid 6128] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] close(3) = 0 [pid 5076] mkdir("./58", 0777) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] mkdir("./57", 0777 [pid 6128] <... futex resumed>) = 1 [pid 6126] <... futex resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6130 ./strace-static-x86_64: Process 6130 attached [pid 6126] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... mkdir resumed>) = 0 [pid 6130] set_robust_list(0x5555571ca6a0, 24 [pid 6128] creat("./file0", 000 [pid 6130] <... set_robust_list resumed>) = 0 [pid 6128] <... creat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6130] chdir("./59" [pid 6128] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6130] <... chdir resumed>) = 0 [pid 6128] <... futex resumed>) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6128] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6126] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6131 [pid 5072] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6126] <... futex resumed>) = 0 [pid 6126] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6131 attached [pid 6127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6127] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6130] <... prctl resumed>) = 0 [pid 6127] <... mmap resumed>) = 0x7eff81e8c000 [pid 6131] set_robust_list(0x5555571ca6a0, 24 [pid 6127] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6131] <... set_robust_list resumed>) = 0 [pid 6131] chdir("./57" [pid 6130] setpgid(0, 0 [pid 6131] <... chdir resumed>) = 0 [pid 6127] <... mprotect resumed>) = 0 [pid 6130] <... setpgid resumed>) = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6127] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6131] <... setpgid resumed>) = 0 [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] <... openat resumed>) = 3 [pid 6127] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6131] write(3, "1000", 4 [pid 6127] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6131] <... write resumed>) = 4 [pid 6131] close(3) = 0 [pid 6127] <... clone3 resumed> => {parent_tid=[6132]}, 88) = 6132 [ 162.989961][ T6129] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.022434][ T6129] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.023539][ T6128] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6131] symlink("/dev/binderfs", "./binderfs" [pid 6127] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6132 attached [pid 6131] <... symlink resumed>) = 0 [pid 6130] write(3, "1000", 4 [pid 6131] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... write resumed>) = 4 [pid 6126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6131] <... futex resumed>) = 0 [pid 6131] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6132] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6131] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6130] close(3 [pid 6127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6126] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6131] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6126] <... futex resumed>) = 0 [pid 6130] <... close resumed>) = 0 [pid 6132] <... rseq resumed>) = 0 [pid 6131] <... mprotect resumed>) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs" [pid 6127] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6132] set_robust_list(0x7eff81eac9a0, 24 [pid 6131] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6133]}, 88) = 6133 [pid 6132] <... set_robust_list resumed>) = 0 [pid 6131] rt_sigprocmask(SIG_SETMASK, [], [pid 6130] <... symlink resumed>) = 0 [pid 6127] <... futex resumed>) = 0 [pid 6126] <... mmap resumed>) = 0x7eff81e8c000 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], [pid 6131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6131] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6126] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6131] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6133 attached [pid 6132] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6131] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6130] <... futex resumed>) = 0 [pid 6126] <... mprotect resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6133] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 5072] close(3 [pid 6133] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 5072] <... close resumed>) = 0 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], [pid 6130] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6126] rt_sigprocmask(SIG_BLOCK, ~[], [ 163.030230][ T6129] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.058251][ T6128] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.068460][ T6128] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6130] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6126] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6133] memfd_create("syzkaller", 0) = 3 [pid 6133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6134 [pid 6133] <... mmap resumed>) = 0x7eff79a00000 [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6126] <... clone3 resumed> => {parent_tid=[6135]}, 88) = 6135 [pid 6126] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6135 attached [pid 6130] <... mmap resumed>) = 0x7eff81ead000 [pid 6126] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6134 attached [pid 6135] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6130] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6126] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3 [pid 6135] <... rseq resumed>) = 0 [pid 6134] set_robust_list(0x5555571ca6a0, 24 [pid 6130] <... mprotect resumed>) = 0 [pid 6126] <... futex resumed>) = 0 [pid 6134] <... set_robust_list resumed>) = 0 [pid 6135] set_robust_list(0x7eff81eac9a0, 24 [pid 6134] chdir("./57" [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6126] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] <... set_robust_list resumed>) = 0 [pid 6134] <... chdir resumed>) = 0 [pid 6133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 6135] rt_sigprocmask(SIG_SETMASK, [], [pid 6134] prctl(PR_SET_PDEATHSIG, SIGKILL [ 163.084272][ T6128] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.087345][ T6129] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6135] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6134] <... prctl resumed>) = 0 [pid 6130] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6127] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6135] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6134] setpgid(0, 0 [pid 6133] <... write resumed>) = 524288 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6134] <... setpgid resumed>) = 0 [pid 6134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6134] write(3, "1000", 4 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6136 [pid 6134] <... write resumed>) = 4 [pid 6134] close(3) = 0 [pid 6130] <... clone3 resumed> => {parent_tid=[6137]}, 88) = 6137 ./strace-static-x86_64: Process 6137 attached ./strace-static-x86_64: Process 6136 attached [pid 6134] symlink("/dev/binderfs", "./binderfs" [pid 6130] rt_sigprocmask(SIG_SETMASK, [], [pid 6136] set_robust_list(0x5555571ca6a0, 24 [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6137] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6136] <... set_robust_list resumed>) = 0 [pid 6134] <... symlink resumed>) = 0 [pid 6137] <... rseq resumed>) = 0 [pid 6136] chdir("./58" [pid 6130] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] set_robust_list(0x7eff81ecd9a0, 24 [pid 6136] <... chdir resumed>) = 0 [pid 6134] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] <... open resumed>) = 5 [pid 6130] <... futex resumed>) = 0 [pid 6137] <... set_robust_list resumed>) = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6134] <... futex resumed>) = 0 [pid 6132] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6137] rt_sigprocmask(SIG_SETMASK, [], [pid 6136] <... prctl resumed>) = 0 [pid 6134] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6132] <... futex resumed>) = 0 [pid 6137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6134] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6133] munmap(0x7eff79a00000, 138412032 [pid 6136] write(3, "1000", 4) = 4 [pid 6134] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6133] <... munmap resumed>) = 0 [pid 6136] close(3 [pid 6134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6136] <... close resumed>) = 0 [pid 6134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6136] symlink("/dev/binderfs", "./binderfs" [pid 6134] <... mmap resumed>) = 0x7eff81ead000 [pid 6137] memfd_create("syzkaller", 0 [pid 6136] <... symlink resumed>) = 0 [pid 6134] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6132] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... memfd_create resumed>) = 3 [pid 6136] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... mprotect resumed>) = 0 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6136] <... futex resumed>) = 0 [pid 6134] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6136] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6134] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6136] <... rt_sigaction resumed>NULL, 8) = 0 [ 163.133706][ T6128] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.158654][ T6129] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.166553][ T6128] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6134] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6138 attached [pid 6137] <... mmap resumed>) = 0x7eff79a00000 [pid 6136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6138] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6134] <... clone3 resumed> => {parent_tid=[6138]}, 88) = 6138 [pid 6138] <... rseq resumed>) = 0 [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6134] rt_sigprocmask(SIG_SETMASK, [], [pid 6133] <... openat resumed>) = 4 [pid 6138] set_robust_list(0x7eff81ecd9a0, 24 [pid 6136] <... mmap resumed>) = 0x7eff81ead000 [pid 6133] ioctl(4, LOOP_SET_FD, 3 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6136] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6138] rt_sigprocmask(SIG_SETMASK, [], [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6136] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6134] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] memfd_create("syzkaller", 0 [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6134] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6139 attached [pid 6138] <... memfd_create resumed>) = 3 [pid 6135] <... open resumed>) = 5 [pid 6134] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6128] <... write resumed>) = 53248 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6128] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... mmap resumed>) = 0x7eff79a00000 [pid 6135] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = 0 [pid 6139] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6136] <... clone3 resumed> => {parent_tid=[6139]}, 88) = 6139 [pid 6135] <... futex resumed>) = 0 [pid 6129] <... write resumed>) = 53248 [pid 6128] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] exit_group(0 [pid 6139] <... rseq resumed>) = 0 [pid 6137] <... write resumed>) = 524288 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], [pid 6133] <... ioctl resumed>) = 0 [pid 6129] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] <... exit_group resumed>) = ? [ 163.183924][ T6129] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.198118][ T6133] loop4: detected capacity change from 0 to 1024 [pid 6139] set_robust_list(0x7eff81ecd9a0, 24 [pid 6137] munmap(0x7eff79a00000, 138412032 [pid 6136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6129] <... futex resumed>) = 0 [pid 6128] <... futex resumed>) = ? [pid 6139] <... set_robust_list resumed>) = 0 [pid 6136] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] +++ exited with 0 +++ [pid 6133] close(3 [pid 6129] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6127] exit_group(0 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], [pid 6136] <... futex resumed>) = 0 [pid 6133] <... close resumed>) = 0 [pid 6132] <... futex resumed>) = ? [pid 6129] <... futex resumed>) = ? [pid 6127] <... exit_group resumed>) = ? [pid 6139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6138] <... write resumed>) = 524288 [pid 6136] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6133] close(4 [pid 6132] +++ exited with 0 +++ [pid 6129] +++ exited with 0 +++ [pid 6128] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 6139] memfd_create("syzkaller", 0) = 3 [pid 6133] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6133] mkdir("./file1", 0777 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6139] <... mmap resumed>) = 0x7eff79a00000 [pid 6133] <... mkdir resumed>) = 0 [pid 6127] +++ exited with 0 +++ [pid 5074] <... restart_syscall resumed>) = 0 [pid 6137] <... munmap resumed>) = 0 [pid 5074] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6127, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5074] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... restart_syscall resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6133] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5074] newfstatat(3, "", [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5073] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] munmap(0x7eff79a00000, 138412032 [pid 6137] <... openat resumed>) = 4 [pid 6133] <... mount resumed>) = 0 [pid 6139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6133] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6133] chdir("./file1" [pid 5074] newfstatat(AT_FDCWD, "./58/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 6138] <... munmap resumed>) = 0 [pid 6133] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6138] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6138] <... openat resumed>) = 4 [pid 6133] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] unlink("./58/binderfs" [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 6133] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... unlink resumed>) = 0 [pid 6137] ioctl(4, LOOP_SET_FD, 3 [pid 6133] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5074] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] newfstatat(3, "", [pid 6133] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6133] creat("./file0", 000 [pid 6131] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6133] <... creat resumed>) = 4 [pid 5073] getdents64(3, [pid 6133] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6133] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6131] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] <... ioctl resumed>) = 0 [pid 6131] <... futex resumed>) = 0 [pid 6131] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6139] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6138] close(3 [pid 5073] unlink("./57/binderfs" [pid 6137] close(3 [pid 6138] <... close resumed>) = 0 [pid 6137] <... close resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6138] close(4 [pid 6137] close(4 [pid 5073] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] <... close resumed>) = 0 [pid 6137] <... close resumed>) = 0 [pid 6138] mkdir("./file1", 0777 [pid 6137] mkdir("./file1", 0777 [pid 6138] <... mkdir resumed>) = 0 [pid 6138] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5074] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [ 163.286745][ T6138] loop1: detected capacity change from 0 to 1024 [ 163.296897][ T6137] loop0: detected capacity change from 0 to 1024 [ 163.316290][ T6133] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] newfstatat(AT_FDCWD, "./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6139] munmap(0x7eff79a00000, 138412032 [pid 5074] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6139] <... munmap resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 4 [pid 6139] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] getdents64(4, [pid 6139] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6137] <... mount resumed>) = 0 [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./58/file1" [pid 6138] <... mount resumed>) = 0 [pid 6137] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... rmdir resumed>) = 0 [pid 6138] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6137] <... openat resumed>) = 3 [pid 6131] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6137] chdir("./file1" [pid 6138] <... openat resumed>) = 3 [pid 6137] <... chdir resumed>) = 0 [pid 6131] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] chdir("./file1" [pid 6131] <... futex resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./57/file1", [pid 6138] <... chdir resumed>) = 0 [pid 6131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6138] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6131] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6131] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6138] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... mprotect resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6138] <... futex resumed>) = 1 [pid 6134] <... futex resumed>) = 0 [pid 6131] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6138] creat("./file0", 000 [pid 6137] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6134] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6138] <... creat resumed>) = 4 [pid 6137] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = 0 [pid 6131] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6140 attached [pid 6138] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 1 [pid 6134] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... futex resumed>) = 0 [pid 5074] close(3 [pid 5073] <... openat resumed>) = 4 [pid 6138] <... futex resumed>) = 0 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... clone3 resumed> => {parent_tid=[6140]}, 88) = 6140 [pid 6130] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6138] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6134] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] rt_sigprocmask(SIG_SETMASK, [], [pid 6130] <... futex resumed>) = 0 [pid 5074] rmdir("./58" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6140] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6139] <... ioctl resumed>) = 0 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6134] <... futex resumed>) = 0 [pid 6131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6137] creat("./file0", 000 [pid 6130] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 6140] <... rseq resumed>) = 0 [pid 6139] close(3 [pid 6138] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6134] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6131] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] set_robust_list(0x7eff81eac9a0, 24 [pid 5074] mkdir("./59", 0777 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6140] <... set_robust_list resumed>) = 0 [pid 6131] <... futex resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], [pid 6131] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] getdents64(4, [pid 6140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6140] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6137] <... creat resumed>) = 4 [ 163.361327][ T6139] loop5: detected capacity change from 0 to 1024 [ 163.374881][ T6133] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.399017][ T6133] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6137] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./57/file1") = 0 [pid 6139] <... close resumed>) = 0 [pid 6139] close(4 [pid 5073] getdents64(3, [pid 6139] <... close resumed>) = 0 [pid 6139] mkdir("./file1", 0777 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6139] <... mkdir resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./57") = 0 [pid 5073] mkdir("./58", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6139] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6137] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [ 163.414435][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 163.414454][ T28] audit: type=1800 audit(1708423241.035:350): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 163.430735][ T6133] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6140] <... open resumed>) = 5 [pid 6139] <... mount resumed>) = 0 [pid 6137] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6130] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6134] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = 0 [pid 6139] <... openat resumed>) = 3 [pid 6134] <... futex resumed>) = 0 [pid 6131] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6130] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6139] chdir("./file1" [pid 6134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... chdir resumed>) = 0 [pid 6134] <... mmap resumed>) = 0x7eff81e8c000 [pid 6139] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6134] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6134] <... mprotect resumed>) = 0 [pid 6139] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6139] <... futex resumed>) = 1 [pid 6134] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6139] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6134] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6140] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 0 [pid 6140] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6134] <... clone3 resumed> => {parent_tid=[6141]}, 88) = 6141 [pid 6139] creat("./file0", 000 [pid 6136] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 163.461108][ T6138] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.478001][ T6137] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6134] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6141 attached [pid 6139] <... creat resumed>) = 4 [pid 6134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6141] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6139] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... rseq resumed>) = 0 [pid 6139] <... futex resumed>) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6134] <... futex resumed>) = 0 [pid 6141] set_robust_list(0x7eff81eac9a0, 24 [pid 6139] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6141] <... set_robust_list resumed>) = 0 [pid 6139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] <... futex resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], [pid 6139] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6136] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] close(3 [pid 6141] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... close resumed>) = 0 [pid 6141] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... ioctl resumed>) = 0 [pid 6130] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 163.520070][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.528014][ T6133] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.546175][ T6137] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.552390][ T6138] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6134] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6130] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] close(3 [pid 6136] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6142 [pid 5073] <... close resumed>) = 0 [pid 6136] <... futex resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6143 [pid 6136] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6136] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6144 attached ./strace-static-x86_64: Process 6143 attached ./strace-static-x86_64: Process 6142 attached => {parent_tid=[6144]}, 88) = 6144 [pid 6130] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6142] set_robust_list(0x5555571ca6a0, 24 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], [pid 6142] <... set_robust_list resumed>) = 0 [pid 6136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6142] chdir("./59" [pid 6136] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... mprotect resumed>) = 0 [pid 6144] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6143] set_robust_list(0x5555571ca6a0, 24 [pid 6142] <... chdir resumed>) = 0 [pid 6144] <... rseq resumed>) = 0 [pid 6142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6136] <... futex resumed>) = 0 [pid 6144] set_robust_list(0x7eff81eac9a0, 24 [pid 6142] <... prctl resumed>) = 0 [pid 6136] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... set_robust_list resumed>) = 0 [pid 6143] <... set_robust_list resumed>) = 0 [pid 6142] setpgid(0, 0 [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6144] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6142] <... setpgid resumed>) = 0 [pid 6144] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6130] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6143] chdir("./58" [pid 6142] write(3, "1000", 4) = 4 [pid 6142] close(3) = 0 [pid 6142] symlink("/dev/binderfs", "./binderfs" [pid 6143] <... chdir resumed>) = 0 [pid 6142] <... symlink resumed>) = 0 [pid 6142] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [ 163.560069][ T28] audit: type=1800 audit(1708423241.135:351): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 163.573812][ T6133] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.592916][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.603599][ T6138] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.605429][ T6137] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6142] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6145 attached [pid 6143] <... prctl resumed>) = 0 [pid 6142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6145] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6143] setpgid(0, 0 [pid 6142] <... mmap resumed>) = 0x7eff81ead000 [pid 6130] <... clone3 resumed> => {parent_tid=[6145]}, 88) = 6145 [pid 6145] <... rseq resumed>) = 0 [pid 6142] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6145] set_robust_list(0x7eff81eac9a0, 24 [pid 6143] <... setpgid resumed>) = 0 [pid 6142] <... mprotect resumed>) = 0 [pid 6130] rt_sigprocmask(SIG_SETMASK, [], [pid 6145] <... set_robust_list resumed>) = 0 [pid 6142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6142] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6130] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6143] <... openat resumed>) = 3 [pid 6130] <... futex resumed>) = 0 [pid 6143] write(3, "1000", 4 [pid 6136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6130] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... write resumed>) = 4 [pid 6142] <... clone3 resumed> => {parent_tid=[6146]}, 88) = 6146 ./strace-static-x86_64: Process 6146 attached [pid 6142] rt_sigprocmask(SIG_SETMASK, [], [pid 6143] close(3 [pid 6146] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6133] <... write resumed>) = 53248 [pid 6143] <... close resumed>) = 0 [pid 6146] <... rseq resumed>) = 0 [ 163.627802][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.638157][ T6138] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.656794][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6143] symlink("/dev/binderfs", "./binderfs" [pid 6142] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] set_robust_list(0x7eff81ecd9a0, 24 [pid 6142] <... futex resumed>) = 0 [pid 6133] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... symlink resumed>) = 0 [pid 6142] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6133] <... futex resumed>) = 0 [pid 6131] exit_group(0 [pid 6140] <... futex resumed>) = ? [pid 6131] <... exit_group resumed>) = ? [pid 6146] <... set_robust_list resumed>) = 0 [pid 6141] <... open resumed>) = 5 [pid 6140] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ [pid 6143] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6131] +++ exited with 0 +++ [pid 6146] rt_sigprocmask(SIG_SETMASK, [], [pid 6143] <... futex resumed>) = 0 [pid 6141] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6141] <... futex resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6143] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6146] memfd_create("syzkaller", 0) = 3 [pid 6141] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6145] <... open resumed>) = 5 [pid 5075] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6145] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6145] <... futex resumed>) = 0 [pid 6130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] newfstatat(3, "", [pid 6145] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6144] <... open resumed>) = 5 [pid 6143] <... mmap resumed>) = 0x7eff81ead000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 163.685865][ T6138] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.692544][ T6137] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.706687][ T28] audit: type=1800 audit(1708423241.235:352): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 163.722211][ T6138] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6144] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] unlink("./57/binderfs") = 0 [pid 6144] <... futex resumed>) = 0 [pid 5075] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6144] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] <... mprotect resumed>) = 0 [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6146] <... write resumed>) = 524288 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6147 attached [pid 6146] munmap(0x7eff79a00000, 138412032 [pid 6143] <... clone3 resumed> => {parent_tid=[6147]}, 88) = 6147 [pid 6147] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], [pid 6147] <... rseq resumed>) = 0 [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6147] set_robust_list(0x7eff81ecd9a0, 24 [pid 6146] <... munmap resumed>) = 0 [pid 6143] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6147] <... set_robust_list resumed>) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6143] <... futex resumed>) = 0 [pid 6147] rt_sigprocmask(SIG_SETMASK, [], [pid 6146] <... openat resumed>) = 4 [ 163.741565][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.742282][ T6137] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.777968][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6143] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = 0 [pid 6147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 6147] memfd_create("syzkaller", 0 [pid 5075] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] <... memfd_create resumed>) = 3 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6146] <... ioctl resumed>) = 0 [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6146] close(3) = 0 [pid 6146] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./57/file1", [pid 6146] <... close resumed>) = 0 [pid 6139] <... write resumed>) = 53248 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6146] mkdir("./file1", 0777 [pid 6139] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] exit_group(0 [pid 5075] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] <... mkdir resumed>) = 0 [pid 6144] <... futex resumed>) = ? [pid 6139] <... futex resumed>) = ? [pid 6136] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6147] <... write resumed>) = 524288 [pid 6146] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6144] +++ exited with 0 +++ [pid 6139] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6147] munmap(0x7eff79a00000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 6147] <... munmap resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 6147] <... openat resumed>) = 4 [pid 6138] <... write resumed>) = 53248 [ 163.796002][ T6137] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.798781][ T6146] loop3: detected capacity change from 0 to 1024 [ 163.804765][ T28] audit: type=1800 audit(1708423241.265:353): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 6138] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 6138] <... futex resumed>) = 0 [pid 6137] <... write resumed>) = 53248 [pid 5076] <... openat resumed>) = 3 [pid 6146] <... mount resumed>) = 0 [pid 6138] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] newfstatat(3, "", [pid 6146] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6134] exit_group(0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6147] <... ioctl resumed>) = 0 [pid 6146] <... openat resumed>) = 3 [pid 6141] <... futex resumed>) = ? [pid 6138] <... futex resumed>) = ? [pid 6137] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... exit_group resumed>) = ? [pid 5076] getdents64(3, [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6147] close(3 [pid 6146] chdir("./file1" [pid 6141] +++ exited with 0 +++ [pid 6138] +++ exited with 0 +++ [pid 6137] <... futex resumed>) = 0 [pid 6134] +++ exited with 0 +++ [pid 6130] exit_group(0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] close(4 [pid 6147] <... close resumed>) = 0 [pid 6146] <... chdir resumed>) = 0 [pid 6145] <... futex resumed>) = ? [pid 6130] <... exit_group resumed>) = ? [pid 5076] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... close resumed>) = 0 [pid 6147] close(4 [pid 6146] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6145] +++ exited with 0 +++ [pid 6137] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./57/file1" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6134, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6147] <... close resumed>) = 0 [pid 6146] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] newfstatat(AT_FDCWD, "./58/binderfs", [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5076] unlink("./58/binderfs" [pid 5075] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5071] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6147] mkdir("./file1", 0777 [pid 5075] getdents64(3, [pid 5072] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6147] <... mkdir resumed>) = 0 [pid 5075] close(3 [pid 5072] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(3, [pid 6146] <... futex resumed>) = 1 [pid 6142] <... futex resumed>) = 0 [ 163.865434][ T6147] loop2: detected capacity change from 0 to 1024 [pid 5075] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] creat("./file0", 000 [pid 6142] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6147] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6146] <... creat resumed>) = 4 [pid 6142] <... futex resumed>) = 0 [pid 5075] rmdir("./57" [pid 5072] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6146] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... rmdir resumed>) = 0 [pid 5071] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6142] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] unlink("./57/binderfs" [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6142] <... futex resumed>) = 0 [pid 5075] mkdir("./58", 0777 [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6142] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] newfstatat(AT_FDCWD, "./59/binderfs", [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6147] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] unlink("./59/binderfs" [pid 6147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] chdir("./file1") = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6147] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(AT_FDCWD, "./58/file1", [pid 6147] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6147] creat("./file0", 000 [pid 6143] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6143] <... futex resumed>) = 0 [pid 5076] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] <... creat resumed>) = 4 [pid 6143] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6142] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6142] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6142] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6142] <... clone3 resumed> => {parent_tid=[6148]}, 88) = 6148 [pid 6142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6142] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... openat resumed>) = 4 [pid 6147] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(4, "", ./strace-static-x86_64: Process 6148 attached [pid 6147] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6148] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6147] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6143] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 5075] <... ioctl resumed>) = 0 [ 163.940750][ T6146] hfsplus: request for non-existent node 16777216 in B*Tree [ 163.965879][ T6146] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6148] <... rseq resumed>) = 0 [pid 6143] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] close(3 [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6143] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6148] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6149 attached [pid 6148] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] close(4 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6149 [pid 6148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6148] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5076] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] rmdir("./58/file1" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./59/file1", [pid 5072] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(4, "", [pid 5071] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5071] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(4, "", [pid 5072] close(4) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./57/file1" [pid 5071] getdents64(4, [pid 6142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6142] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5071] getdents64(4, [pid 6142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [ 164.009163][ T6146] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.028918][ T28] audit: type=1800 audit(1708423241.645:354): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 164.042853][ T6146] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] close(4) = 0 [pid 5071] rmdir("./59/file1" [pid 5076] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6149] set_robust_list(0x5555571ca6a0, 24 [pid 5076] close(3 [pid 5071] getdents64(3, [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [pid 5072] close(3 [pid 5071] rmdir("./59" [pid 5072] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] rmdir("./57") = 0 [pid 5076] <... close resumed>) = 0 [pid 6149] <... set_robust_list resumed>) = 0 [pid 5076] rmdir("./58" [pid 5071] mkdir("./60", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] mkdir("./58", 0777 [pid 5071] <... mkdir resumed>) = 0 [pid 6149] chdir("./58" [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] mkdir("./59", 0777 [pid 6149] <... chdir resumed>) = 0 [pid 6143] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [ 164.053928][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6143] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6149] <... prctl resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6149] setpgid(0, 0 [pid 6143] <... mmap resumed>) = 0x7eff81e8c000 [pid 6149] <... setpgid resumed>) = 0 [pid 6143] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6149] <... openat resumed>) = 3 [pid 6143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6149] write(3, "1000", 4 [pid 6148] <... open resumed>) = 5 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6150]}, 88) = 6150 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6149] <... write resumed>) = 4 [pid 6148] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6150 attached [ 164.082375][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.091571][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.106692][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.118798][ T6146] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6150] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6150] set_robust_list(0x7eff81eac9a0, 24 [pid 6149] close(3 [pid 6148] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = 0 [pid 6150] <... set_robust_list resumed>) = 0 [pid 6150] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6150] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6148] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6149] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 6149] symlink("/dev/binderfs", "./binderfs" [pid 5076] close(3 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6149] <... symlink resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6151 ./strace-static-x86_64: Process 6151 attached [pid 6146] <... write resumed>) = 53248 [pid 5072] close(3 [pid 6151] set_robust_list(0x5555571ca6a0, 24 [pid 6146] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 6151] <... set_robust_list resumed>) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6142] exit_group(0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6151] chdir("./60" [pid 6149] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = ? [pid 6142] <... exit_group resumed>) = ? [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6151] <... chdir resumed>) = 0 [pid 6148] +++ exited with 0 +++ [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6149] <... futex resumed>) = 0 [pid 6146] +++ exited with 0 +++ [pid 6142] +++ exited with 0 +++ ./strace-static-x86_64: Process 6153 attached [pid 6151] <... prctl resumed>) = 0 [pid 6149] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6153 [ 164.122930][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.134547][ T6147] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.141990][ T28] audit: type=1800 audit(1708423241.755:355): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 164.160938][ T6146] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6153] set_robust_list(0x5555571ca6a0, 24 [pid 6151] setpgid(0, 0 [pid 6149] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6142, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6152 [pid 6153] <... set_robust_list resumed>) = 0 [pid 6149] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] chdir("./59" [pid 6151] <... setpgid resumed>) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6152 attached [pid 6149] <... mmap resumed>) = 0x7eff81ead000 [pid 5074] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6149] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6152] set_robust_list(0x5555571ca6a0, 24 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6149] <... mprotect resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6152] <... set_robust_list resumed>) = 0 [pid 6151] <... openat resumed>) = 3 [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] newfstatat(3, "", [pid 6149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6152] chdir("./58" [pid 6151] write(3, "1000", 4 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6151] <... write resumed>) = 4 [pid 5074] getdents64(3, [pid 6151] close(3 [pid 6152] <... chdir resumed>) = 0 [pid 6151] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6149] <... clone3 resumed> => {parent_tid=[6154]}, 88) = 6154 [pid 6153] <... chdir resumed>) = 0 [pid 6152] <... prctl resumed>) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs" [pid 6152] setpgid(0, 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6151] <... symlink resumed>) = 0 [pid 6147] <... write resumed>) = 53248 ./strace-static-x86_64: Process 6154 attached [pid 6152] <... setpgid resumed>) = 0 [pid 6153] <... prctl resumed>) = 0 [pid 6151] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6147] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6154] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6153] setpgid(0, 0 [pid 6151] <... futex resumed>) = 0 [pid 6150] <... open resumed>) = 5 [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6147] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6154] <... rseq resumed>) = 0 [pid 6152] <... openat resumed>) = 3 [pid 6153] <... setpgid resumed>) = 0 [pid 6151] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6149] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6147] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6154] set_robust_list(0x7eff81ecd9a0, 24 [pid 6152] write(3, "1000", 4 [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6151] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6150] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6152] <... write resumed>) = 4 [pid 6153] <... openat resumed>) = 3 [pid 6151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6150] <... futex resumed>) = 0 [pid 6154] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] close(3 [pid 6151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6150] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] <... close resumed>) = 0 [pid 6153] write(3, "1000", 4 [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6149] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6143] exit_group(0 [pid 5074] unlink("./59/binderfs" [pid 6154] memfd_create("syzkaller", 0 [pid 6152] symlink("/dev/binderfs", "./binderfs" [pid 6153] <... write resumed>) = 4 [pid 6151] <... mmap resumed>) = 0x7eff81ead000 [pid 6150] <... futex resumed>) = ? [pid 6147] <... futex resumed>) = ? [pid 6143] <... exit_group resumed>) = ? [pid 6154] <... memfd_create resumed>) = 3 [pid 6152] <... symlink resumed>) = 0 [pid 6153] close(3 [pid 6151] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6150] +++ exited with 0 +++ [pid 6147] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 6154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6152] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... close resumed>) = 0 [pid 6151] <... mprotect resumed>) = 0 [pid 6143] +++ exited with 0 +++ [pid 5074] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6154] <... mmap resumed>) = 0x7eff79a00000 [pid 6152] <... futex resumed>) = 0 [pid 6153] symlink("/dev/binderfs", "./binderfs" [pid 6151] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6152] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6153] <... symlink resumed>) = 0 [pid 6151] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6153] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6153] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6152] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6153] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] <... mprotect resumed>) = 0 [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6151] <... clone3 resumed> => {parent_tid=[6155]}, 88) = 6155 [pid 6153] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 ./strace-static-x86_64: Process 6155 attached [pid 6152] <... mmap resumed>) = 0x7eff81ead000 [pid 6153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6151] rt_sigprocmask(SIG_SETMASK, [], [pid 6155] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6152] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6155] <... rseq resumed>) = 0 [pid 6152] <... mprotect resumed>) = 0 [pid 6153] <... clone3 resumed> => {parent_tid=[6156]}, 88) = 6156 [pid 6151] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6156 attached [pid 6155] set_robust_list(0x7eff81ecd9a0, 24 [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6153] rt_sigprocmask(SIG_SETMASK, [], [pid 6151] <... futex resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6155] <... set_robust_list resumed>) = 0 [pid 6152] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6151] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] <... openat resumed>) = 3 [pid 6156] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6155] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6153] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] newfstatat(3, "", ./strace-static-x86_64: Process 6157 attached [pid 6156] <... rseq resumed>) = 0 [pid 6155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6157] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6156] set_robust_list(0x7eff81ecd9a0, 24 [pid 6155] memfd_create("syzkaller", 0 [pid 6152] <... clone3 resumed> => {parent_tid=[6157]}, 88) = 6157 [pid 6153] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] getdents64(3, [pid 6157] <... rseq resumed>) = 0 [pid 6156] <... set_robust_list resumed>) = 0 [pid 6155] <... memfd_create resumed>) = 3 [pid 6152] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6156] rt_sigprocmask(SIG_SETMASK, [], [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6157] set_robust_list(0x7eff81ecd9a0, 24 [pid 6156] memfd_create("syzkaller", 0 [pid 6155] <... mmap resumed>) = 0x7eff79a00000 [pid 6152] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... set_robust_list resumed>) = 0 [pid 6156] <... memfd_create resumed>) = 3 [pid 6154] <... write resumed>) = 524288 [pid 6152] <... futex resumed>) = 0 [pid 5074] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6157] rt_sigprocmask(SIG_SETMASK, [], [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6152] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6154] munmap(0x7eff79a00000, 138412032 [pid 6157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6156] <... mmap resumed>) = 0x7eff79a00000 [pid 5074] newfstatat(AT_FDCWD, "./59/file1", [pid 6157] memfd_create("syzkaller", 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./58/binderfs" [pid 5074] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... memfd_create resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6157] <... mmap resumed>) = 0x7eff79a00000 [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6154] <... munmap resumed>) = 0 [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5073] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./58/file1", [pid 5074] rmdir("./59/file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6154] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6154] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5074] close(3) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./59" [pid 6155] <... write resumed>) = 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./58/file1") = 0 [pid 6157] <... write resumed>) = 524288 [pid 6156] <... write resumed>) = 524288 [pid 6154] <... ioctl resumed>) = 0 [pid 5074] mkdir("./60", 0777 [pid 6155] munmap(0x7eff79a00000, 138412032 [pid 5073] getdents64(3, [pid 6156] munmap(0x7eff79a00000, 138412032 [pid 6157] munmap(0x7eff79a00000, 138412032 [pid 6155] <... munmap resumed>) = 0 [pid 6154] close(3 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6157] <... munmap resumed>) = 0 [pid 6155] <... openat resumed>) = 4 [pid 6154] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] close(3 [pid 6157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6156] <... munmap resumed>) = 0 [pid 6155] ioctl(4, LOOP_SET_FD, 3 [pid 6154] close(4 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6157] <... openat resumed>) = 4 [pid 6156] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6155] <... ioctl resumed>) = 0 [pid 6154] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] rmdir("./58" [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 6156] <... openat resumed>) = 4 [pid 6157] <... ioctl resumed>) = 0 [pid 6156] ioctl(4, LOOP_SET_FD, 3 [pid 6155] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 6155] <... close resumed>) = 0 [ 164.376175][ T6154] loop4: detected capacity change from 0 to 1024 [ 164.404185][ T6155] loop0: detected capacity change from 0 to 1024 [ 164.412262][ T6157] loop1: detected capacity change from 0 to 1024 [pid 6154] mkdir("./file1", 0777 [pid 6155] close(4 [pid 6154] <... mkdir resumed>) = 0 [pid 5073] mkdir("./59", 0777 [pid 6157] close(3 [pid 6156] <... ioctl resumed>) = 0 [pid 6155] <... close resumed>) = 0 [pid 6154] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6157] <... close resumed>) = 0 [pid 6156] close(3 [pid 6155] mkdir("./file1", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 6157] close(4 [pid 6155] <... mkdir resumed>) = 0 [pid 6157] <... close resumed>) = 0 [pid 6157] mkdir("./file1", 0777 [pid 6156] <... close resumed>) = 0 [pid 6155] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6154] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6157] <... mkdir resumed>) = 0 [ 164.420548][ T6156] loop5: detected capacity change from 0 to 1024 [pid 6156] close(4 [pid 6154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... ioctl resumed>) = 0 [pid 6157] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6156] <... close resumed>) = 0 [pid 6154] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 6154] chdir("./file1" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6154] <... chdir resumed>) = 0 [pid 6156] mkdir("./file1", 0777 [pid 6154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6156] <... mkdir resumed>) = 0 [pid 6154] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6156] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6155] <... mount resumed>) = 0 [pid 6155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6154] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... openat resumed>) = 3 [pid 6154] <... futex resumed>) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6155] chdir("./file1" [pid 6154] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... chdir resumed>) = 0 [pid 6149] <... futex resumed>) = 0 [pid 6155] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6149] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6157] <... mount resumed>) = 0 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] close(3 [pid 6155] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6154] creat("./file0", 000 [pid 6155] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 6155] <... futex resumed>) = 1 [pid 6157] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6155] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... creat resumed>) = 4 [pid 6151] <... futex resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6157] <... openat resumed>) = 3 [pid 6151] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] chdir("./file1") = 0 ./strace-static-x86_64: Process 6158 attached [pid 6157] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6156] <... mount resumed>) = 0 [pid 6155] <... futex resumed>) = 0 [pid 6154] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = 1 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6158 [pid 6158] set_robust_list(0x5555571ca6a0, 24 [pid 6157] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6155] creat("./file0", 000 [pid 6151] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... set_robust_list resumed>) = 0 [pid 6157] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6155] <... creat resumed>) = 4 [pid 6154] <... futex resumed>) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6149] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = 0 [pid 6155] <... futex resumed>) = 0 [pid 6149] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6155] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5073] <... ioctl resumed>) = 0 [pid 6156] <... openat resumed>) = 3 [pid 6157] <... futex resumed>) = 1 [pid 6156] chdir("./file1" [pid 6152] <... futex resumed>) = 0 [pid 6151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] chdir("./60" [pid 6157] creat("./file0", 000 [pid 6156] <... chdir resumed>) = 0 [pid 6152] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] <... chdir resumed>) = 0 [pid 6157] <... creat resumed>) = 4 [pid 6156] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6155] <... futex resumed>) = 0 [pid 6152] <... futex resumed>) = 0 [pid 6151] <... futex resumed>) = 1 [pid 5073] close(3 [pid 6156] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6155] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6152] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6151] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6157] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6157] <... futex resumed>) = 1 [pid 6156] <... futex resumed>) = 1 [pid 6152] <... futex resumed>) = 0 [pid 6158] <... prctl resumed>) = 0 [pid 6157] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6156] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6152] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = 0 [pid 6153] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6152] <... futex resumed>) = 0 [pid 6158] setpgid(0, 0 [pid 6152] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... setpgid resumed>) = 0 [pid 6156] creat("./file0", 000) = 4 [pid 6151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6159 ./strace-static-x86_64: Process 6159 attached [pid 6156] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6159] set_robust_list(0x5555571ca6a0, 24 [pid 6156] <... futex resumed>) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6151] <... futex resumed>) = 0 [pid 6149] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] <... openat resumed>) = 3 [pid 6156] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 164.544716][ T6154] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.554924][ T6155] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.562233][ T6154] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.562659][ T6154] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6153] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6149] <... futex resumed>) = 0 [pid 6159] <... set_robust_list resumed>) = 0 [pid 6158] write(3, "1000", 4 [pid 6153] <... futex resumed>) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6159] chdir("./59" [pid 6158] <... write resumed>) = 4 [pid 6153] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] <... mmap resumed>) = 0x7eff81e8c000 [pid 6159] <... chdir resumed>) = 0 [pid 6158] close(3 [pid 6149] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6158] <... close resumed>) = 0 [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6158] symlink("/dev/binderfs", "./binderfs" [pid 6151] <... mmap resumed>) = 0x7eff81e8c000 [pid 6149] <... mprotect resumed>) = 0 [pid 6159] <... prctl resumed>) = 0 [ 164.610027][ T6156] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.612115][ T6154] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.620904][ T6157] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6159] setpgid(0, 0 [pid 6158] <... symlink resumed>) = 0 [pid 6152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6151] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6149] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6159] <... setpgid resumed>) = 0 [pid 6152] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6152] <... futex resumed>) = 0 [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6151] <... mprotect resumed>) = 0 [pid 6149] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6152] <... mmap resumed>) = 0x7eff81e8c000 [pid 6151] <... clone3 resumed> => {parent_tid=[6160]}, 88) = 6160 ./strace-static-x86_64: Process 6160 attached [pid 6158] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6151] rt_sigprocmask(SIG_SETMASK, [], [pid 6160] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6160] <... rseq resumed>) = 0 [pid 6152] <... mprotect resumed>) = 0 [pid 6151] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] <... futex resumed>) = 0 [pid 6149] <... clone3 resumed> => {parent_tid=[6161]}, 88) = 6161 ./strace-static-x86_64: Process 6161 attached [pid 6160] set_robust_list(0x7eff81eac9a0, 24 [pid 6159] <... openat resumed>) = 3 [pid 6158] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6152] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6151] <... futex resumed>) = 0 [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6151] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6161] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6160] <... set_robust_list resumed>) = 0 [ 164.647723][ T6155] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.652476][ T6154] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.682555][ T6155] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.689881][ T6155] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6161] <... rseq resumed>) = 0 [pid 6160] rt_sigprocmask(SIG_SETMASK, [], [pid 6153] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6161] set_robust_list(0x7eff81eac9a0, 24 [pid 6160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] <... set_robust_list resumed>) = 0 [pid 6160] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6153] <... futex resumed>) = 0 [pid 6161] rt_sigprocmask(SIG_SETMASK, [], [pid 6159] write(3, "1000", 4 [pid 6158] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6152] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6149] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... write resumed>) = 4 [pid 6158] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6153] <... mmap resumed>) = 0x7eff81e8c000 [pid 6149] <... futex resumed>) = 0 [pid 6159] close(3 [pid 6158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] <... clone3 resumed> => {parent_tid=[6162]}, 88) = 6162 [pid 6159] <... close resumed>) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6152] rt_sigprocmask(SIG_SETMASK, [], [pid 6149] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6162 attached [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6159] symlink("/dev/binderfs", "./binderfs" [pid 6158] <... mmap resumed>) = 0x7eff81ead000 [pid 6152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6153] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6162] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6161] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6159] <... symlink resumed>) = 0 [pid 6158] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6152] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... mprotect resumed>) = 0 [pid 6162] <... rseq resumed>) = 0 [pid 6152] <... futex resumed>) = 0 [pid 6158] <... mprotect resumed>) = 0 [pid 6152] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] set_robust_list(0x7eff81eac9a0, 24 [pid 6159] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... set_robust_list resumed>) = 0 [pid 6159] <... futex resumed>) = 0 [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6153] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6159] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [ 164.697490][ T28] audit: type=1800 audit(1708423242.305:356): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 164.699442][ T6156] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.727029][ T6157] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.741360][ T6154] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6153] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6153] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6163]}, 88) = 6163 [pid 6153] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6163 attached [pid 6162] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6159] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6163] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6153] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... rseq resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6163] set_robust_list(0x7eff81eac9a0, 24 [pid 6159] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6153] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6163] <... set_robust_list resumed>) = 0 [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6149] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6163] rt_sigprocmask(SIG_SETMASK, [], [pid 6159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6154] <... write resumed>) = 53248 [pid 6159] <... mmap resumed>) = 0x7eff81ead000 [pid 6163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6159] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6155] <... write resumed>) = 53248 [pid 6154] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6154] <... futex resumed>) = 0 [pid 6159] <... mprotect resumed>) = 0 [pid 6158] <... clone3 resumed> => {parent_tid=[6164]}, 88) = 6164 [pid 6155] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6160] <... open resumed>) = 5 [pid 6159] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6158] rt_sigprocmask(SIG_SETMASK, [], [pid 6155] <... futex resumed>) = 0 [pid 6160] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6155] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] <... open resumed>) = 5 [pid 6160] <... futex resumed>) = 0 [pid 6159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6158] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6164 attached [pid 6161] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] <... futex resumed>) = 0 [pid 6164] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6161] <... futex resumed>) = 0 [pid 6159] <... clone3 resumed> => {parent_tid=[6165]}, 88) = 6165 [pid 6151] exit_group(0 [pid 6149] exit_group(0 [pid 6158] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6165 attached [pid 6164] <... rseq resumed>) = 0 [pid 6159] rt_sigprocmask(SIG_SETMASK, [], [pid 6154] <... futex resumed>) = ? [pid 6149] <... exit_group resumed>) = ? [pid 6165] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6164] set_robust_list(0x7eff81ecd9a0, 24 [pid 6160] <... futex resumed>) = ? [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6155] <... futex resumed>) = ? [pid 6154] +++ exited with 0 +++ [pid 6153] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 164.760653][ T6155] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.773496][ T6157] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.780840][ T6157] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.789201][ T6155] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6151] <... exit_group resumed>) = ? [pid 6165] <... rseq resumed>) = 0 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6161] +++ exited with 0 +++ [pid 6160] +++ exited with 0 +++ [pid 6149] +++ exited with 0 +++ [pid 6164] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6164] memfd_create("syzkaller", 0) = 3 [pid 6164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] <... mmap resumed>) = 0x7eff79a00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 164.832486][ T6156] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.852156][ T6156] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.855069][ T28] audit: type=1800 audit(1708423242.375:357): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 6165] set_robust_list(0x7eff81ecd9a0, 24 [pid 6164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6163] <... open resumed>) = 5 [pid 6159] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] +++ exited with 0 +++ [pid 6151] +++ exited with 0 +++ [pid 6165] <... set_robust_list resumed>) = 0 [pid 6163] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], [pid 6163] <... futex resumed>) = 0 [pid 6165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6163] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] memfd_create("syzkaller", 0 [pid 6162] <... open resumed>) = 5 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5071] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 6159] <... futex resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6159] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5075] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(3, "", [pid 5071] unlink("./60/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6162] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... memfd_create resumed>) = 3 [pid 6162] <... futex resumed>) = 0 [pid 6162] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(3, [pid 5071] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6165] <... mmap resumed>) = 0x7eff79a00000 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6156] <... write resumed>) = 53248 [pid 5075] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6156] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6156] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] unlink("./58/binderfs") = 0 [pid 6153] exit_group(0 [pid 5075] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6153] <... exit_group resumed>) = ? [pid 6163] <... futex resumed>) = ? [pid 6156] <... futex resumed>) = ? [pid 5071] <... umount2 resumed>) = 0 [pid 6156] +++ exited with 0 +++ [pid 5071] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./60/file1", [pid 6164] <... write resumed>) = 524288 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] munmap(0x7eff79a00000, 138412032 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6164] <... munmap resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6164] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(4, "", [pid 6164] <... openat resumed>) = 4 [ 164.885314][ T6156] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.895723][ T6156] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.904252][ T6157] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6164] ioctl(4, LOOP_SET_FD, 3 [pid 6163] +++ exited with 0 +++ [pid 6153] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 164.933610][ T28] audit: type=1800 audit(1708423242.395:358): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 164.941576][ T6157] hfsplus: request for non-existent node 16777216 in B*Tree [ 164.956915][ T28] audit: type=1800 audit(1708423242.435:359): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5071] getdents64(4, [pid 6157] <... write resumed>) = 53248 [pid 6165] <... write resumed>) = 524288 [pid 6164] <... ioctl resumed>) = 0 [pid 6157] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6165] munmap(0x7eff79a00000, 138412032 [pid 6164] close(3 [pid 6157] <... futex resumed>) = 0 [pid 6152] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 6165] <... munmap resumed>) = 0 [pid 6164] <... close resumed>) = 0 [pid 6162] <... futex resumed>) = ? [pid 6152] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./58/file1", [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6164] close(4 [pid 6162] +++ exited with 0 +++ [pid 6165] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6157] +++ exited with 0 +++ [pid 6152] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(4 [pid 5075] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6152, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./60/file1" [pid 6164] <... close resumed>) = 0 [pid 6165] <... openat resumed>) = 4 [pid 5072] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 6165] ioctl(4, LOOP_SET_FD, 3 [pid 6164] mkdir("./file1", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5072] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [ 164.962540][ T6164] loop3: detected capacity change from 0 to 1024 [pid 6164] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] close(3 [pid 6164] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6165] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5072] newfstatat(3, "", [pid 5071] <... close resumed>) = 0 [pid 6165] close(3 [pid 6164] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] rmdir("./60" [pid 6165] <... close resumed>) = 0 [pid 6164] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5072] getdents64(3, [pid 6164] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] mkdir("./61", 0777 [pid 5072] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6164] chdir("./file1" [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6164] <... chdir resumed>) = 0 [pid 6165] close(4 [pid 6164] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... mkdir resumed>) = 0 [pid 6165] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./59/binderfs", [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(AT_FDCWD, "./58/binderfs", [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6165] mkdir("./file1", 0777 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6165] <... mkdir resumed>) = 0 [pid 6164] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] unlink("./59/binderfs" [pid 5075] close(4 [pid 5072] unlink("./58/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 6165] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6164] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./58/file1" [pid 5072] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./58") = 0 [pid 5075] mkdir("./59", 0777 [pid 6164] <... futex resumed>) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6164] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... mkdir resumed>) = 0 [pid 6164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] <... futex resumed>) = 0 [pid 6164] creat("./file0", 000 [ 165.018294][ T6165] loop2: detected capacity change from 0 to 1024 [pid 6158] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] <... creat resumed>) = 4 [pid 6164] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6158] <... futex resumed>) = 0 [pid 6164] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] <... futex resumed>) = 0 [pid 6164] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6158] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6165] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... ioctl resumed>) = 0 [pid 6165] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6165] chdir("./file1") = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6165] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6165] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] <... futex resumed>) = 0 [pid 6159] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... futex resumed>) = 0 [pid 6159] <... futex resumed>) = 1 [pid 6165] creat("./file0", 000) = 4 [pid 6159] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5071] close(3 [pid 6165] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6165] <... futex resumed>) = 1 [pid 6159] <... futex resumed>) = 0 [pid 5072] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 6159] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6159] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6159] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] newfstatat(AT_FDCWD, "./58/file1", [pid 5076] newfstatat(AT_FDCWD, "./59/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6166 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 6158] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 ./strace-static-x86_64: Process 6166 attached [pid 5072] rmdir("./58/file1" [pid 6166] set_robust_list(0x5555571ca6a0, 24 [pid 6158] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 6166] <... set_robust_list resumed>) = 0 [pid 5072] getdents64(3, [pid 6166] chdir("./61" [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 6166] <... chdir resumed>) = 0 [pid 5072] rmdir("./58" [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 6166] setpgid(0, 0 [pid 5072] mkdir("./59", 0777 [pid 6166] <... setpgid resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6166] write(3, "1000", 4 [pid 6158] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] newfstatat(4, "", [pid 5072] <... openat resumed>) = 3 [pid 6166] <... write resumed>) = 4 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6166] close(3) = 0 [ 165.096125][ T6164] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.127515][ T6165] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.134077][ T6164] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6158] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6159] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6158] <... mprotect resumed>) = 0 [pid 6159] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] getdents64(4, [pid 6166] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6158] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6158] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] getdents64(4, [pid 6158] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6167 attached [pid 6166] <... futex resumed>) = 0 [pid 6159] <... mprotect resumed>) = 0 [pid 5076] close(4 [pid 6166] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6159] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6166] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6159] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6159] <... clone3 resumed> => {parent_tid=[6168]}, 88) = 6168 [pid 6166] <... mmap resumed>) = 0x7eff81ead000 [pid 6159] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] <... mprotect resumed>) = 0 [pid 6159] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6159] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6168 attached [pid 6167] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6158] <... clone3 resumed> => {parent_tid=[6167]}, 88) = 6167 [pid 5076] <... close resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6168] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6167] <... rseq resumed>) = 0 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6159] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] rmdir("./59/file1" [pid 5075] close(3 [pid 6168] <... rseq resumed>) = 0 [pid 6167] set_robust_list(0x7eff81eac9a0, 24 [pid 6158] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... close resumed>) = 0 ./strace-static-x86_64: Process 6169 attached [pid 6168] set_robust_list(0x7eff81eac9a0, 24 [pid 6166] <... clone3 resumed> => {parent_tid=[6169]}, 88) = 6169 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6168] <... set_robust_list resumed>) = 0 [pid 6167] <... set_robust_list resumed>) = 0 [ 165.168918][ T6165] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.177791][ T6164] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.199275][ T6165] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.218023][ T6164] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.243021][ T6165] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6166] rt_sigprocmask(SIG_SETMASK, [], [pid 6158] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 6169] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6168] rt_sigprocmask(SIG_SETMASK, [], [pid 6167] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6170 attached [pid 6169] <... rseq resumed>) = 0 [pid 6168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] set_robust_list(0x7eff81ecd9a0, 24 [pid 6167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6158] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] set_robust_list(0x5555571ca6a0, 24 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6168] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6167] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6166] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 6170] <... set_robust_list resumed>) = 0 [pid 6169] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6170 [pid 6170] chdir("./59" [pid 6169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6170] <... chdir resumed>) = 0 [pid 6169] memfd_create("syzkaller", 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6169] <... memfd_create resumed>) = 3 [pid 5076] close(3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6169] <... mmap resumed>) = 0x7eff79a00000 [pid 5076] rmdir("./59" [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... rmdir resumed>) = 0 [pid 6170] <... prctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6170] setpgid(0, 0) = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6170] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] mkdir("./60", 0777 [pid 6170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6170] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6169] <... write resumed>) = 524288 [pid 6158] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... mkdir resumed>) = 0 [pid 6170] <... mprotect resumed>) = 0 [pid 6168] <... open resumed>) = 5 [pid 5072] close(3 [pid 6168] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 6168] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6168] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] <... open resumed>) = 5 [pid 5076] <... openat resumed>) = 3 [pid 6167] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6167] <... futex resumed>) = 0 [pid 6170] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6167] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6172 attached => {parent_tid=[6172]}, 88) = 6172 [pid 6172] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6171 [pid 6172] <... rseq resumed>) = 0 [pid 6170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6172] set_robust_list(0x7eff81ecd9a0, 24 [pid 6170] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... set_robust_list resumed>) = 0 [pid 6170] <... futex resumed>) = 0 [pid 6169] munmap(0x7eff79a00000, 138412032./strace-static-x86_64: Process 6171 attached [pid 6172] rt_sigprocmask(SIG_SETMASK, [], [pid 6170] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6169] <... munmap resumed>) = 0 [pid 6172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6171] set_robust_list(0x5555571ca6a0, 24 [pid 6172] memfd_create("syzkaller", 0 [pid 6171] <... set_robust_list resumed>) = 0 [pid 6172] <... memfd_create resumed>) = 3 [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6171] chdir("./59" [pid 6169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6169] ioctl(4, LOOP_SET_FD, 3 [pid 6171] <... chdir resumed>) = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6172] <... mmap resumed>) = 0x7eff79a00000 [pid 6172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6171] <... prctl resumed>) = 0 [pid 6171] setpgid(0, 0) = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6171] write(3, "1000", 4) = 4 [pid 6171] close(3) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6169] <... ioctl resumed>) = 0 [pid 6169] close(3) = 0 [pid 6165] <... write resumed>) = 53248 [pid 6171] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] close(4 [pid 6165] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... close resumed>) = 0 [pid 6165] <... futex resumed>) = 0 [pid 6159] exit_group(0 [ 165.269992][ T6164] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.282931][ T6165] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.290253][ T6165] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.301401][ T6164] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.309303][ T6169] loop0: detected capacity change from 0 to 1024 [pid 6169] mkdir("./file1", 0777 [pid 6168] <... futex resumed>) = ? [pid 6159] <... exit_group resumed>) = ? [pid 6171] <... futex resumed>) = 0 [pid 6171] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6172] <... write resumed>) = 524288 [pid 6169] <... mkdir resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6171] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6168] +++ exited with 0 +++ [pid 5076] close(3) = 0 [pid 6169] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6165] +++ exited with 0 +++ [pid 6159] +++ exited with 0 +++ [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6171] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6172] munmap(0x7eff79a00000, 138412032 [pid 6171] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6173 attached [pid 6171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6172] <... munmap resumed>) = 0 [pid 6164] <... write resumed>) = 53248 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6171] <... mmap resumed>) = 0x7eff81ead000 [pid 6164] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6173 [pid 5073] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6171] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6164] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] set_robust_list(0x5555571ca6a0, 24 [pid 6171] <... mprotect resumed>) = 0 [pid 6172] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6169] <... mount resumed>) = 0 [pid 6164] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6171] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6172] <... openat resumed>) = 4 [pid 6169] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6158] exit_group(0 [pid 6173] <... set_robust_list resumed>) = 0 [pid 6171] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6172] ioctl(4, LOOP_SET_FD, 3 [pid 6169] <... openat resumed>) = 3 [pid 6167] <... futex resumed>) = ? [pid 6164] <... futex resumed>) = ? [pid 6158] <... exit_group resumed>) = ? [pid 5073] <... openat resumed>) = 3 [pid 6173] chdir("./60" [pid 6171] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6172] <... ioctl resumed>) = 0 [pid 6167] +++ exited with 0 +++ [pid 5073] newfstatat(3, "", [pid 6173] <... chdir resumed>) = 0 [pid 6172] close(3 [pid 6169] chdir("./file1" [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6172] <... close resumed>) = 0 [pid 6169] <... chdir resumed>) = 0 [pid 6173] <... prctl resumed>) = 0 [pid 6172] close(4 [pid 6169] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6173] setpgid(0, 0 [pid 6172] <... close resumed>) = 0 [pid 6169] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6173] <... setpgid resumed>) = 0 [pid 6172] mkdir("./file1", 0777 [pid 6169] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6172] <... mkdir resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6166] <... futex resumed>) = 0 [pid 5073] getdents64(3, [pid 6173] <... openat resumed>) = 3 [pid 6172] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6169] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6174 attached [pid 6173] write(3, "1000", 4 [pid 6171] <... clone3 resumed> => {parent_tid=[6174]}, 88) = 6174 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6174] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6173] <... write resumed>) = 4 [pid 6171] rt_sigprocmask(SIG_SETMASK, [], [pid 6169] creat("./file0", 000 [pid 6166] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] +++ exited with 0 +++ [pid 6158] +++ exited with 0 +++ [pid 5073] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6174] <... rseq resumed>) = 0 [pid 6173] close(3 [pid 6171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6169] <... creat resumed>) = 4 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6158, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] set_robust_list(0x7eff81ecd9a0, 24 [pid 6173] <... close resumed>) = 0 [pid 6171] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... set_robust_list resumed>) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs" [pid 6171] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6166] <... futex resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6174] rt_sigprocmask(SIG_SETMASK, [], [pid 6173] <... symlink resumed>) = 0 [pid 6171] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6169] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6174] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6173] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 5073] unlink("./59/binderfs" [pid 6174] memfd_create("syzkaller", 0 [pid 6173] <... futex resumed>) = 0 [pid 6169] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6166] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... memfd_create resumed>) = 3 [pid 6173] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5074] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... unlink resumed>) = 0 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6173] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6174] <... mmap resumed>) = 0x7eff79a00000 [pid 6173] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6172] <... mount resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 165.384663][ T6172] loop4: detected capacity change from 0 to 1024 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6172] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] getdents64(3, [pid 6173] <... mmap resumed>) = 0x7eff81ead000 [pid 6172] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6173] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6172] chdir("./file1" [pid 5074] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] <... mprotect resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6172] <... chdir resumed>) = 0 [pid 6172] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6173] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6172] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./60/binderfs") = 0 [pid 5073] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6173] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6172] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6172] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6166] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6172] creat("./file0", 000 [pid 6170] <... futex resumed>) = 0 [pid 6166] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6175 attached [pid 6173] <... clone3 resumed> => {parent_tid=[6175]}, 88) = 6175 [pid 6172] <... creat resumed>) = 4 [pid 6170] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... mprotect resumed>) = 0 [pid 5073] getdents64(4, [ 165.462818][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.470293][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6175] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], [pid 6172] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6172] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 6166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6172] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6170] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6170] <... futex resumed>) = 0 [pid 6170] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... clone3 resumed> => {parent_tid=[6176]}, 88) = 6176 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6173] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 0 [pid 6173] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6166] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6176 attached 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6176] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 5073] close(4 [pid 6176] <... rseq resumed>) = 0 [pid 6175] set_robust_list(0x7eff81ecd9a0, 24 [pid 6174] <... write resumed>) = 524288 [pid 5073] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6174] munmap(0x7eff79a00000, 138412032) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 6176] set_robust_list(0x7eff81eac9a0, 24 [pid 6175] <... set_robust_list resumed>) = 0 [pid 5074] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./59/file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./60/file1", [pid 6176] <... set_robust_list resumed>) = 0 [pid 6175] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] getdents64(3, [pid 6176] rt_sigprocmask(SIG_SETMASK, [], [pid 6175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6175] memfd_create("syzkaller", 0 [pid 5074] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6176] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6175] <... memfd_create resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5074] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... close resumed>) = 0 [ 165.505499][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.520699][ T6172] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.529341][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.536278][ T6174] loop1: detected capacity change from 0 to 1024 [pid 6175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6176] <... open resumed>) = 5 [pid 6175] <... mmap resumed>) = 0x7eff79a00000 [pid 6170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... openat resumed>) = 4 [pid 5073] rmdir("./59" [pid 6170] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6170] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] newfstatat(4, "", [pid 5073] <... rmdir resumed>) = 0 [pid 6174] <... ioctl resumed>) = 0 [pid 6170] <... mprotect resumed>) = 0 [pid 6174] close(3 [pid 6170] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6174] <... close resumed>) = 0 [pid 6170] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6174] close(4 [pid 6170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6177 attached [pid 6174] <... close resumed>) = 0 [pid 6177] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6174] mkdir("./file1", 0777 [pid 6170] <... clone3 resumed> => {parent_tid=[6177]}, 88) = 6177 [pid 6177] <... rseq resumed>) = 0 [pid 6174] <... mkdir resumed>) = 0 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], [pid 6177] set_robust_list(0x7eff81eac9a0, 24 [pid 6170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] mkdir("./60", 0777 [pid 6177] <... set_robust_list resumed>) = 0 [pid 6170] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] rt_sigprocmask(SIG_SETMASK, [], [pid 6170] <... futex resumed>) = 0 [pid 6177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6174] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6170] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(4, [pid 5073] <... mkdir resumed>) = 0 [pid 6177] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] getdents64(4, [pid 5073] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6177] <... open resumed>) = 5 [pid 5074] close(4 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6175] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./60/file1" [pid 6177] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... rmdir resumed>) = 0 [pid 6177] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6170] <... futex resumed>) = 0 [ 165.554085][ T6172] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.585069][ T6172] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.596504][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] getdents64(3, [pid 6176] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 6176] <... futex resumed>) = 0 [pid 6176] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./60") = 0 [pid 5074] mkdir("./61", 0777 [pid 6175] munmap(0x7eff79a00000, 138412032 [pid 5074] <... mkdir resumed>) = 0 [ 165.601017][ T6172] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.628766][ T6169] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.642216][ T6172] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6175] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6175] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6175] <... openat resumed>) = 4 [pid 6175] ioctl(4, LOOP_SET_FD, 3 [pid 6174] <... mount resumed>) = 0 [pid 6174] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] close(3 [pid 6174] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6174] chdir("./file1") = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6178 [pid 6174] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6169] <... write resumed>) = 53248 [pid 6169] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] exit_group(0./strace-static-x86_64: Process 6178 attached [pid 6176] <... futex resumed>) = ? [pid 6175] <... ioctl resumed>) = 0 [pid 6174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6166] <... exit_group resumed>) = ? [pid 6178] set_robust_list(0x5555571ca6a0, 24 [pid 6176] +++ exited with 0 +++ [pid 6175] close(3 [pid 6174] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... write resumed>) = 53248 [pid 6169] +++ exited with 0 +++ [pid 6166] +++ exited with 0 +++ [pid 6178] <... set_robust_list resumed>) = 0 [pid 6175] <... close resumed>) = 0 [pid 6174] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 6172] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] chdir("./60" [pid 6175] close(4 [pid 6174] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... futex resumed>) = 0 [pid 6170] exit_group(0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6178] <... chdir resumed>) = 0 [ 165.649543][ T6172] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.659663][ T6175] loop5: detected capacity change from 0 to 1024 [pid 6177] <... futex resumed>) = ? [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 6170] <... exit_group resumed>) = ? [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6175] <... close resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 6177] +++ exited with 0 +++ [pid 6172] +++ exited with 0 +++ [pid 5071] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6175] mkdir("./file1", 0777 [pid 6174] creat("./file0", 000 [pid 6171] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... ioctl resumed>) = 0 [pid 5071] unlink("./61/binderfs" [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6175] <... mkdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6178] <... prctl resumed>) = 0 [pid 6175] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6174] <... creat resumed>) = 4 [pid 6170] +++ exited with 0 +++ [pid 5074] close(3 [pid 6178] setpgid(0, 0 [pid 6174] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... setpgid resumed>) = 0 [pid 6174] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6170, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] <... close resumed>) = 0 [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6174] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6171] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6171] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6171] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./59/binderfs", ./strace-static-x86_64: Process 6179 attached [pid 6178] <... openat resumed>) = 3 [pid 6175] <... mount resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] unlink("./59/binderfs" [pid 6175] <... openat resumed>) = 3 [pid 5075] <... unlink resumed>) = 0 [pid 6175] chdir("./file1") = 0 [pid 6175] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] set_robust_list(0x5555571ca6a0, 24 [pid 6178] write(3, "1000", 4 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6179 [pid 6179] <... set_robust_list resumed>) = 0 [pid 6178] <... write resumed>) = 4 [pid 6175] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] chdir("./61" [pid 6178] close(3 [pid 6175] <... futex resumed>) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6175] creat("./file0", 000 [pid 6173] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] <... chdir resumed>) = 0 [pid 6178] <... close resumed>) = 0 [pid 6173] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6178] symlink("/dev/binderfs", "./binderfs" [pid 6175] <... creat resumed>) = 4 [pid 6179] <... prctl resumed>) = 0 [pid 6178] <... symlink resumed>) = 0 [pid 6179] setpgid(0, 0 [pid 6178] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] newfstatat(AT_FDCWD, "./61/file1", [pid 6179] <... setpgid resumed>) = 0 [pid 6178] <... futex resumed>) = 0 [pid 6175] <... futex resumed>) = 1 [pid 6173] <... futex resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6178] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6175] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6178] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6173] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6175] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6171] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] <... openat resumed>) = 3 [pid 6178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... mmap resumed>) = 0x7eff81ead000 [pid 6171] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] write(3, "1000", 4 [pid 6178] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6171] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 4 [pid 6179] <... write resumed>) = 4 [pid 6178] <... mprotect resumed>) = 0 [pid 6171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 165.735628][ T6174] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.755594][ T6174] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(AT_FDCWD, "./59/file1", [pid 5071] newfstatat(4, "", [pid 6179] close(3 [pid 6178] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6171] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6179] <... close resumed>) = 0 [pid 6171] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 6178] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6171] <... mprotect resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5071] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./61/file1") = 0 [pid 5071] getdents64(3, [pid 5075] getdents64(4, [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6179] <... symlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] close(3 [pid 5075] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./61" [pid 5075] close(4 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] mkdir("./62", 0777 [pid 6179] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6171] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] rmdir("./59/file1" [pid 5071] <... mkdir resumed>) = 0 [pid 6179] <... futex resumed>) = 0 [pid 6171] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6179] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6171] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6180 attached [pid 5075] getdents64(3, [pid 5071] <... openat resumed>) = 3 [pid 6180] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6179] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6171] <... clone3 resumed> => {parent_tid=[6181]}, 88) = 6181 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6171] rt_sigprocmask(SIG_SETMASK, [], [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6181 attached [pid 6180] <... rseq resumed>) = 0 [pid 5075] close(3 [pid 6181] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6180] set_robust_list(0x7eff81ecd9a0, 24 [pid 5075] <... close resumed>) = 0 [pid 6181] <... rseq resumed>) = 0 [pid 6180] <... set_robust_list resumed>) = 0 [pid 5075] rmdir("./59" [pid 6181] set_robust_list(0x7eff81eac9a0, 24 [pid 6180] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] <... rmdir resumed>) = 0 [pid 6181] <... set_robust_list resumed>) = 0 [pid 6180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6178] <... clone3 resumed> => {parent_tid=[6180]}, 88) = 6180 [pid 6171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6181] rt_sigprocmask(SIG_SETMASK, [], [pid 6180] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] rt_sigprocmask(SIG_SETMASK, [], [pid 6171] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] mkdir("./60", 0777 [pid 6181] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6179] <... mmap resumed>) = 0x7eff81ead000 [pid 6178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6171] <... futex resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6178] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6178] <... futex resumed>) = 1 [pid 6180] <... futex resumed>) = 0 [pid 6173] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6180] memfd_create("syzkaller", 0 [pid 6179] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6173] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6180] <... memfd_create resumed>) = 3 [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6179] <... mprotect resumed>) = 0 [pid 6173] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6180] <... mmap resumed>) = 0x7eff79a00000 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6173] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6173] <... mprotect resumed>) = 0 [ 165.789646][ T6175] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.792462][ T6174] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.825778][ T6175] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6179] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6178] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6173] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6173] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6182 attached [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5071] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6183 attached [pid 6182] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6183] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6182] <... rseq resumed>) = 0 [pid 6173] <... clone3 resumed> => {parent_tid=[6182]}, 88) = 6182 [pid 6183] <... rseq resumed>) = 0 [pid 6182] set_robust_list(0x7eff81eac9a0, 24 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], [pid 6183] set_robust_list(0x7eff81ecd9a0, 24 [pid 6182] <... set_robust_list resumed>) = 0 [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6183] <... set_robust_list resumed>) = 0 [pid 6183] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6183] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6182] rt_sigprocmask(SIG_SETMASK, [], [pid 6179] <... clone3 resumed> => {parent_tid=[6183]}, 88) = 6183 [pid 6173] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6179] rt_sigprocmask(SIG_SETMASK, [], [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6182] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6179] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6179] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6183] memfd_create("syzkaller", 0 [pid 5071] close(3 [pid 6183] <... memfd_create resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6180] <... write resumed>) = 524288 [pid 6183] <... mmap resumed>) = 0x7eff79a00000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6184 [pid 5075] <... ioctl resumed>) = 0 [ 165.850528][ T6174] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.881318][ T6175] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.890846][ T6174] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 6184 attached [pid 6180] munmap(0x7eff79a00000, 138412032 [pid 6183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6180] <... munmap resumed>) = 0 [pid 6184] set_robust_list(0x5555571ca6a0, 24 [pid 5075] close(3 [pid 6184] <... set_robust_list resumed>) = 0 [pid 6180] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... close resumed>) = 0 [pid 6180] <... openat resumed>) = 4 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6180] ioctl(4, LOOP_SET_FD, 3 [pid 6184] chdir("./62" [pid 6173] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] <... chdir resumed>) = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6184] setpgid(0, 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6185 [pid 6184] <... setpgid resumed>) = 0 [ 165.925138][ T6175] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.942453][ T6174] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.947439][ T6180] loop2: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6185 attached [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6183] <... write resumed>) = 524288 [pid 6182] <... open resumed>) = 5 [pid 6180] <... ioctl resumed>) = 0 [pid 6185] set_robust_list(0x5555571ca6a0, 24 [pid 6184] <... openat resumed>) = 3 [pid 6183] munmap(0x7eff79a00000, 138412032 [pid 6182] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] close(3 [pid 6174] <... write resumed>) = 53248 [pid 6185] <... set_robust_list resumed>) = 0 [pid 6184] write(3, "1000", 4 [pid 6183] <... munmap resumed>) = 0 [pid 6182] <... futex resumed>) = 0 [pid 6181] <... open resumed>) = 5 [pid 6180] <... close resumed>) = 0 [pid 6174] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] chdir("./60" [pid 6184] <... write resumed>) = 4 [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6182] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] close(4 [pid 6174] <... futex resumed>) = 0 [pid 6185] <... chdir resumed>) = 0 [pid 6184] close(3 [pid 6183] <... openat resumed>) = 4 [pid 6181] <... futex resumed>) = 0 [pid 6180] <... close resumed>) = 0 [pid 6175] <... write resumed>) = 53248 [pid 6174] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] exit_group(0 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6184] <... close resumed>) = 0 [pid 6180] mkdir("./file1", 0777 [pid 6175] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] <... exit_group resumed>) = ? [pid 6174] <... futex resumed>) = ? [pid 6185] <... prctl resumed>) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs" [pid 6183] ioctl(4, LOOP_SET_FD, 3 [pid 6181] +++ exited with 0 +++ [pid 6180] <... mkdir resumed>) = 0 [pid 6175] <... futex resumed>) = 0 [pid 6185] setpgid(0, 0 [pid 6180] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6185] <... setpgid resumed>) = 0 [pid 6184] <... symlink resumed>) = 0 [pid 6175] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] exit_group(0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6182] <... futex resumed>) = ? [pid 6180] <... mount resumed>) = 0 [pid 6175] <... futex resumed>) = ? [pid 6173] <... exit_group resumed>) = ? [pid 6184] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] +++ exited with 0 +++ [pid 6180] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6175] +++ exited with 0 +++ [pid 6185] <... openat resumed>) = 3 [pid 6184] <... futex resumed>) = 0 [pid 6180] <... openat resumed>) = 3 [pid 6185] write(3, "1000", 4 [pid 6184] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6180] chdir("./file1" [pid 6173] +++ exited with 0 +++ [pid 6185] <... write resumed>) = 4 [pid 6184] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6180] <... chdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6185] close(3 [pid 6180] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6174] +++ exited with 0 +++ [pid 6171] +++ exited with 0 +++ [pid 6185] <... close resumed>) = 0 [pid 6180] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 6184] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6185] <... symlink resumed>) = 0 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6180] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... restart_syscall resumed>) = 0 [pid 6184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6183] <... ioctl resumed>) = 0 [pid 6180] <... futex resumed>) = 1 [pid 6178] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... mmap resumed>) = 0x7eff81ead000 [pid 6183] close(3 [pid 6180] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6185] <... futex resumed>) = 0 [pid 6184] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6183] <... close resumed>) = 0 [pid 6180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6178] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5072] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6185] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6184] <... mprotect resumed>) = 0 [pid 6183] close(4 [pid 6180] creat("./file0", 000 [pid 6178] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6185] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6183] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6184] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6183] mkdir("./file1", 0777 [pid 6180] <... creat resumed>) = 4 [pid 5076] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 6185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6180] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] newfstatat(3, "", [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6180] <... futex resumed>) = 1 [pid 6178] <... futex resumed>) = 0 [pid 5076] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6185] <... mmap resumed>) = 0x7eff81ead000 [pid 6184] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6183] <... mkdir resumed>) = 0 [pid 6180] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6178] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 6185] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6183] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6178] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6185] <... mprotect resumed>) = 0 [pid 6180] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 165.973656][ T6175] hfsplus: request for non-existent node 16777216 in B*Tree [ 165.981074][ T6175] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.011159][ T6183] loop3: detected capacity change from 0 to 1024 [pid 6178] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6184] <... clone3 resumed> => {parent_tid=[6186]}, 88) = 6186 [pid 5072] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6186 attached [pid 6184] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6186] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6183] <... mount resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6184] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] unlink("./60/binderfs" [pid 6184] <... futex resumed>) = 0 [pid 6185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6184] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6183] <... openat resumed>) = 3 [pid 5076] <... unlink resumed>) = 0 [pid 6183] chdir("./file1" [pid 5076] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6186] <... rseq resumed>) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6183] <... chdir resumed>) = 0 [pid 6178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] unlink("./59/binderfs" [pid 6186] set_robust_list(0x7eff81ecd9a0, 24 [pid 6183] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6178] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... unlink resumed>) = 0 [pid 6186] <... set_robust_list resumed>) = 0 [pid 6185] <... clone3 resumed> => {parent_tid=[6187]}, 88) = 6187 [pid 6183] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6178] <... futex resumed>) = 0 [pid 5072] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6187 attached [pid 6186] rt_sigprocmask(SIG_SETMASK, [], [pid 6185] rt_sigprocmask(SIG_SETMASK, [], [pid 6183] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6187] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6178] <... mmap resumed>) = 0x7eff81e8c000 [pid 6183] <... futex resumed>) = 1 [pid 6187] <... rseq resumed>) = 0 [pid 6186] memfd_create("syzkaller", 0 [pid 6185] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 6178] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6183] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] set_robust_list(0x7eff81ecd9a0, 24 [pid 6186] <... memfd_create resumed>) = 3 [pid 6185] <... futex resumed>) = 0 [pid 6179] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... mprotect resumed>) = 0 [pid 6187] <... set_robust_list resumed>) = 0 [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6185] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6178] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6187] rt_sigprocmask(SIG_SETMASK, [], [pid 6186] <... mmap resumed>) = 0x7eff79a00000 [pid 6178] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6178] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [ 166.077565][ T6180] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.093770][ T6180] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.101700][ T6180] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6187] memfd_create("syzkaller", 0 [pid 6183] creat("./file0", 000 [pid 6179] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6188 attached [pid 6187] <... memfd_create resumed>) = 3 [pid 6188] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6188] <... rseq resumed>) = 0 [pid 6187] <... mmap resumed>) = 0x7eff79a00000 [pid 6183] <... creat resumed>) = 4 [pid 6188] set_robust_list(0x7eff81eac9a0, 24 [pid 6178] <... clone3 resumed> => {parent_tid=[6188]}, 88) = 6188 [pid 6188] <... set_robust_list resumed>) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], [pid 6188] rt_sigprocmask(SIG_SETMASK, [], [pid 6178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6178] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6178] <... futex resumed>) = 0 [pid 6178] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6183] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = 0 [pid 6179] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6179] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6187] <... write resumed>) = 524288 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6183] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./60/file1", [pid 5072] newfstatat(AT_FDCWD, "./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6186] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(4, "", [pid 5076] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] newfstatat(4, "", [ 166.139514][ T6180] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] getdents64(4, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6186] munmap(0x7eff79a00000, 138412032) = 0 [pid 6187] munmap(0x7eff79a00000, 138412032) = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(4, [pid 5072] getdents64(4, [pid 6187] ioctl(4, LOOP_SET_FD, 3 [pid 6186] <... openat resumed>) = 4 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(4, [pid 5072] close(4 [ 166.186394][ T6180] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.192401][ T6183] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.206059][ T6187] loop4: detected capacity change from 0 to 1024 [ 166.208007][ T6183] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.214289][ T6186] loop0: detected capacity change from 0 to 1024 [ 166.222830][ T6183] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6186] ioctl(4, LOOP_SET_FD, 3 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6178] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 6188] <... open resumed>) = 5 [pid 6187] <... ioctl resumed>) = 0 [pid 6188] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] close(3 [pid 6188] <... futex resumed>) = 0 [pid 6187] <... close resumed>) = 0 [pid 6188] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] close(4) = 0 [pid 6187] mkdir("./file1", 0777) = 0 [pid 6187] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5072] rmdir("./59/file1" [pid 6186] <... ioctl resumed>) = 0 [pid 6180] <... write resumed>) = 53248 [pid 6179] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(4 [pid 5072] <... rmdir resumed>) = 0 [pid 6187] <... mount resumed>) = 0 [pid 6186] close(3 [pid 6180] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 6180] <... futex resumed>) = 0 [pid 6180] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6186] <... close resumed>) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] rmdir("./60/file1" [pid 6186] close(4 [pid 6179] <... mmap resumed>) = 0x7eff81e8c000 [pid 6186] <... close resumed>) = 0 [pid 6179] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... rmdir resumed>) = 0 [pid 6186] mkdir("./file1", 0777 [pid 6179] <... mprotect resumed>) = 0 [pid 6186] <... mkdir resumed>) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6187] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6186] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6183] <... write resumed>) = 53248 [pid 6179] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6178] exit_group(0 [pid 5076] getdents64(3, [pid 5072] close(3 [pid 6188] <... futex resumed>) = ? [pid 6187] <... openat resumed>) = 3 [pid 6183] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = ? [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6178] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6189 attached [pid 6188] +++ exited with 0 +++ [pid 6187] chdir("./file1" [pid 6183] <... futex resumed>) = 0 [pid 6180] +++ exited with 0 +++ [pid 5076] close(3 [pid 5072] <... close resumed>) = 0 [pid 6189] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6179] <... clone3 resumed> => {parent_tid=[6189]}, 88) = 6189 [pid 5076] <... close resumed>) = 0 [pid 6189] <... rseq resumed>) = 0 [pid 6179] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] rmdir("./60" [pid 6189] set_robust_list(0x7eff81eac9a0, 24 [pid 6187] <... chdir resumed>) = 0 [pid 6183] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] rmdir("./59" [pid 6189] <... set_robust_list resumed>) = 0 [pid 6179] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./61", 0777 [pid 6179] <... futex resumed>) = 0 [pid 6189] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6187] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6179] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6178] +++ exited with 0 +++ [pid 5076] <... mkdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6189] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6187] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6178, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5072] mkdir("./60", 0777 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6189] <... open resumed>) = 5 [pid 6187] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6187] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6187] creat("./file0", 000 [pid 6185] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... futex resumed>) = 0 [pid 6189] <... futex resumed>) = 1 [pid 6185] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6189] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] <... creat resumed>) = 4 [pid 6179] exit_group(0 [pid 5073] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6189] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 6189] +++ exited with 0 +++ [pid 6183] <... futex resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 166.227584][ T6180] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.234674][ T6183] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.256702][ T6183] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.271882][ T6183] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6183] +++ exited with 0 +++ [pid 6179] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 6187] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6187] <... futex resumed>) = 1 [pid 5073] newfstatat(3, "", [pid 6187] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6185] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] <... futex resumed>) = 0 [pid 6185] <... futex resumed>) = 1 [pid 5073] getdents64(3, [pid 6187] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6185] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] <... mount resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6186] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6186] chdir("./file1") = 0 [pid 5074] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./60/binderfs", [pid 6186] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6184] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] unlink("./60/binderfs" [pid 5072] <... ioctl resumed>) = 0 [pid 6184] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6186] creat("./file0", 000 [pid 6184] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] <... creat resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5073] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] close(3) = 0 [pid 6186] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6186] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6184] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] newfstatat(3, "", [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6184] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6185] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6190 [pid 6185] <... futex resumed>) = 0 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 ./strace-static-x86_64: Process 6190 attached [pid 6185] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6190] set_robust_list(0x5555571ca6a0, 24 [pid 6185] <... mprotect resumed>) = 0 [pid 5076] close(3 [pid 6190] <... set_robust_list resumed>) = 0 [pid 6185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... close resumed>) = 0 [pid 6190] chdir("./60" [pid 6185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6190] <... chdir resumed>) = 0 [pid 6185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [ 166.329288][ T6187] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.337118][ T6187] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6192 attached ) = 0 [pid 6185] <... clone3 resumed> => {parent_tid=[6192]}, 88) = 6192 [pid 5074] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6190] setpgid(0, 0 [pid 6185] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6192] <... rseq resumed>) = 0 [pid 6185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6185] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] set_robust_list(0x7eff81eac9a0, 24 [pid 6190] <... setpgid resumed>) = 0 [pid 6185] <... futex resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6192] <... set_robust_list resumed>) = 0 [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6185] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6191 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6190] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6191 attached [pid 6192] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6190] write(3, "1000", 4 [pid 5074] unlink("./61/binderfs" [pid 6191] set_robust_list(0x5555571ca6a0, 24 [pid 6190] <... write resumed>) = 4 [pid 6191] <... set_robust_list resumed>) = 0 [pid 6190] close(3 [pid 5074] <... unlink resumed>) = 0 [pid 6184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] chdir("./61" [pid 6184] <... futex resumed>) = 0 [pid 6184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6191] <... chdir resumed>) = 0 [pid 6190] <... close resumed>) = 0 [pid 6184] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] symlink("/dev/binderfs", "./binderfs" [pid 6184] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6190] <... symlink resumed>) = 0 [pid 6184] <... mprotect resumed>) = 0 [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6190] <... futex resumed>) = 0 [pid 6184] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6190] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6191] <... prctl resumed>) = 0 [pid 6190] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6191] setpgid(0, 0 [pid 6190] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6184] <... clone3 resumed> => {parent_tid=[6193]}, 88) = 6193 [pid 6191] <... setpgid resumed>) = 0 [pid 6190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6193 attached [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6192] <... open resumed>) = 5 [pid 6190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6193] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6192] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6190] <... mmap resumed>) = 0x7eff81ead000 [pid 6184] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 6190] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6184] <... futex resumed>) = 0 [pid 6192] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] <... mprotect resumed>) = 0 [pid 6184] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6190] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 166.412545][ T6187] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.426532][ T6186] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.442589][ T6187] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6194 attached [pid 6191] <... openat resumed>) = 3 [pid 6194] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6193] <... rseq resumed>) = 0 [pid 6191] write(3, "1000", 4 [pid 6190] <... clone3 resumed> => {parent_tid=[6194]}, 88) = 6194 [pid 6194] <... rseq resumed>) = 0 [pid 6191] <... write resumed>) = 4 [pid 6190] rt_sigprocmask(SIG_SETMASK, [], [pid 6194] set_robust_list(0x7eff81ecd9a0, 24 [pid 6193] set_robust_list(0x7eff81eac9a0, 24 [pid 6191] close(3 [pid 6190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6191] <... close resumed>) = 0 [pid 6190] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 166.457825][ T6187] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6194] rt_sigprocmask(SIG_SETMASK, [], [pid 6193] rt_sigprocmask(SIG_SETMASK, [], [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 6190] <... futex resumed>) = 0 [pid 6194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6194] memfd_create("syzkaller", 0 [pid 6193] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6194] <... memfd_create resumed>) = 3 [pid 6191] <... symlink resumed>) = 0 [pid 6190] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6191] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6191] <... futex resumed>) = 0 [pid 6194] <... mmap resumed>) = 0x7eff79a00000 [pid 6191] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] newfstatat(AT_FDCWD, "./60/file1", [pid 6191] <... mmap resumed>) = 0x7eff81ead000 [pid 5074] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6191] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] <... mprotect resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./61/file1", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6187] <... write resumed>) = 53248 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6191] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6187] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 4 [pid 6187] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(4, "", [pid 6187] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6185] exit_group(0 [pid 5074] <... openat resumed>) = 4 [pid 5073] getdents64(4, [pid 5074] newfstatat(4, "", ./strace-static-x86_64: Process 6195 attached [pid 6192] <... futex resumed>) = ? [pid 6187] <... futex resumed>) = ? [pid 6185] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6195] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6192] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 5074] getdents64(4, [pid 5073] getdents64(4, [pid 6195] <... rseq resumed>) = 0 [pid 6191] <... clone3 resumed> => {parent_tid=[6195]}, 88) = 6195 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [ 166.489075][ T6186] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.492690][ T6187] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.525797][ T6186] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6195] set_robust_list(0x7eff81ecd9a0, 24 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] getdents64(4, [pid 5073] close(4 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6191] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... restart_syscall resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 6191] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6195] <... set_robust_list resumed>) = 0 [pid 6193] <... open resumed>) = 5 [pid 5075] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(4 [pid 5073] <... close resumed>) = 0 [pid 6195] rt_sigprocmask(SIG_SETMASK, [], [pid 6193] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] rmdir("./60/file1" [pid 6195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6194] <... write resumed>) = 524288 [pid 6193] <... futex resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5074] rmdir("./61/file1" [pid 6195] memfd_create("syzkaller", 0 [pid 6194] munmap(0x7eff79a00000, 138412032 [pid 6193] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6195] <... memfd_create resumed>) = 3 [pid 5075] unlink("./60/binderfs" [pid 5074] <... rmdir resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6194] <... munmap resumed>) = 0 [pid 5075] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6194] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6194] <... openat resumed>) = 4 [pid 5074] getdents64(3, [pid 5073] getdents64(3, [pid 6195] <... mmap resumed>) = 0x7eff79a00000 [pid 6195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6194] ioctl(4, LOOP_SET_FD, 3 [pid 6186] <... write resumed>) = 53248 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3 [pid 5073] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./61" [pid 5073] <... close resumed>) = 0 [ 166.554093][ T6186] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.573309][ T6186] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.583340][ T6186] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6186] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6184] exit_group(0 [pid 6193] <... futex resumed>) = ? [pid 6184] <... exit_group resumed>) = ? [pid 5074] <... rmdir resumed>) = 0 [pid 5073] rmdir("./60" [pid 6193] +++ exited with 0 +++ [pid 6186] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 6184] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5074] mkdir("./62", 0777 [pid 5073] mkdir("./61", 0777 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", [pid 6194] <... ioctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6194] close(3) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 3 [pid 5071] getdents64(3, [pid 6194] close(4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6194] <... close resumed>) = 0 [pid 5071] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6195] <... write resumed>) = 524288 [pid 6194] mkdir("./file1", 0777 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] newfstatat(AT_FDCWD, "./60/file1", [pid 6195] munmap(0x7eff79a00000, 138412032 [pid 6194] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./62/binderfs") = 0 [pid 5075] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6194] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6195] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6195] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6195] <... openat resumed>) = 4 [pid 6195] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./60/file1") = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./60") = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] mkdir("./61", 0777 [pid 6195] <... ioctl resumed>) = 0 [pid 6194] <... mount resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6195] close(3 [pid 6194] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] close(3 [pid 6195] <... close resumed>) = 0 [pid 6195] close(4) = 0 [pid 5074] <... close resumed>) = 0 [pid 6195] mkdir("./file1", 0777 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6195] <... mkdir resumed>) = 0 [pid 6194] <... openat resumed>) = 3 [ 166.603314][ T6194] loop1: detected capacity change from 0 to 1024 [ 166.641957][ T6195] loop5: detected capacity change from 0 to 1024 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6196 attached [pid 6195] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6194] chdir("./file1" [pid 5073] <... ioctl resumed>) = 0 [pid 6196] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6196 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] chdir("./62" [pid 5073] close(3 [pid 6196] <... chdir resumed>) = 0 [pid 6194] <... chdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./62/file1", [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... close resumed>) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6196] <... prctl resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6194] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] setpgid(0, 0 [pid 6194] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6196] <... setpgid resumed>) = 0 [pid 6195] <... mount resumed>) = 0 [pid 6194] creat("./file0", 000 [pid 6190] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6194] <... creat resumed>) = 4 [pid 6190] <... futex resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6196] <... openat resumed>) = 3 [pid 6195] <... openat resumed>) = 3 [pid 6194] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6190] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6196] write(3, "1000", 4 [pid 6195] chdir("./file1" [pid 6194] <... futex resumed>) = 0 [pid 6190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5071] <... openat resumed>) = 4 [pid 6196] <... write resumed>) = 4 [pid 6190] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6197 attached [pid 6196] close(3 [pid 6195] <... chdir resumed>) = 0 [pid 6194] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6190] <... futex resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6197 [pid 5071] newfstatat(4, "", [pid 6197] set_robust_list(0x5555571ca6a0, 24 [pid 6196] <... close resumed>) = 0 [pid 6195] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6190] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6196] symlink("/dev/binderfs", "./binderfs" [pid 6197] <... set_robust_list resumed>) = 0 [pid 6196] <... symlink resumed>) = 0 [pid 6197] chdir("./61" [pid 6196] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... chdir resumed>) = 0 [pid 6196] <... futex resumed>) = 0 [pid 6197] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6196] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6197] <... prctl resumed>) = 0 [pid 6196] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6196] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6196] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6197] setpgid(0, 0 [pid 6196] <... mprotect resumed>) = 0 [pid 6197] <... setpgid resumed>) = 0 [pid 6196] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6196] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6195] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6197] <... openat resumed>) = 3 [pid 6196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6195] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] getdents64(4, [pid 6195] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6198 attached [pid 6197] write(3, "1000", 4 [pid 6196] <... clone3 resumed> => {parent_tid=[6198]}, 88) = 6198 [pid 6195] creat("./file0", 000 [pid 6191] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] getdents64(4, [pid 6198] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6197] <... write resumed>) = 4 [pid 6196] rt_sigprocmask(SIG_SETMASK, [], [pid 6191] <... futex resumed>) = 0 [pid 6198] <... rseq resumed>) = 0 [pid 6197] close(3 [pid 6196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6195] <... creat resumed>) = 4 [pid 6191] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6198] set_robust_list(0x7eff81ecd9a0, 24 [pid 6197] <... close resumed>) = 0 [pid 6196] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... set_robust_list resumed>) = 0 [pid 6197] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(4 [pid 6198] rt_sigprocmask(SIG_SETMASK, [], [pid 6197] <... symlink resumed>) = 0 [pid 6196] <... futex resumed>) = 0 [pid 6198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6196] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] <... close resumed>) = 0 [pid 6198] memfd_create("syzkaller", 0 [pid 6197] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6198] <... memfd_create resumed>) = 3 [pid 6197] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6195] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 5071] rmdir("./62/file1" [pid 6195] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6191] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6197] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6191] <... futex resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6191] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] getdents64(3, [pid 6198] <... mmap resumed>) = 0x7eff79a00000 [pid 6197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] close(3 [pid 6197] <... mmap resumed>) = 0x7eff81ead000 [pid 6197] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6190] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./62" [pid 6197] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6190] <... futex resumed>) = 0 [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6190] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5075] close(3 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6199 attached [pid 6197] <... clone3 resumed> => {parent_tid=[6199]}, 88) = 6199 [pid 6190] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6199] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], [pid 6190] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6199] <... rseq resumed>) = 0 [pid 6197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6190] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6199] set_robust_list(0x7eff81ecd9a0, 24 [pid 6197] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6200 attached [pid 6199] <... set_robust_list resumed>) = 0 [pid 6197] <... futex resumed>) = 0 [pid 6200] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6199] rt_sigprocmask(SIG_SETMASK, [], [pid 6197] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6190] <... clone3 resumed> => {parent_tid=[6200]}, 88) = 6200 [pid 5075] <... close resumed>) = 0 [pid 5071] mkdir("./63", 0777 [pid 6200] <... rseq resumed>) = 0 [pid 6199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6190] rt_sigprocmask(SIG_SETMASK, [], [pid 6200] set_robust_list(0x7eff81eac9a0, 24 [pid 6199] memfd_create("syzkaller", 0 [pid 6190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... mkdir resumed>) = 0 [pid 6200] <... set_robust_list resumed>) = 0 [pid 6190] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] rt_sigprocmask(SIG_SETMASK, [], [pid 6190] <... futex resumed>) = 0 [pid 6200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6199] <... memfd_create resumed>) = 3 [pid 6190] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6201 attached ) = 0x7eff79a00000 [pid 6191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6201] set_robust_list(0x5555571ca6a0, 24 [pid 6199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6191] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6201 [pid 6201] <... set_robust_list resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6201] chdir("./61" [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6191] <... mmap resumed>) = 0x7eff81e8c000 [pid 6201] <... chdir resumed>) = 0 [ 166.755935][ T6195] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.776650][ T6194] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6191] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6198] <... write resumed>) = 524288 [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6198] munmap(0x7eff79a00000, 138412032) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6201] <... prctl resumed>) = 0 [pid 6198] <... openat resumed>) = 4 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 6201] setpgid(0, 0 [pid 6191] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6199] <... write resumed>) = 524288 [pid 6199] munmap(0x7eff79a00000, 138412032) = 0 [pid 6199] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6201] <... setpgid resumed>) = 0 [pid 6199] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6202 attached [pid 6202] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6198] <... ioctl resumed>) = 0 [pid 6191] <... clone3 resumed> => {parent_tid=[6202]}, 88) = 6202 [pid 6202] <... rseq resumed>) = 0 [pid 6198] close(3 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6202] set_robust_list(0x7eff81eac9a0, 24 [pid 6201] <... openat resumed>) = 3 [pid 6198] <... close resumed>) = 0 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6202] <... set_robust_list resumed>) = 0 [ 166.823031][ T6195] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.831497][ T6195] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.839197][ T6194] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.850467][ T6198] loop3: detected capacity change from 0 to 1024 [ 166.857445][ T6194] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6199] ioctl(4, LOOP_SET_FD, 3 [pid 6198] close(4 [pid 6202] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] write(3, "1000", 4 [pid 6191] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... ioctl resumed>) = 0 [pid 6201] <... write resumed>) = 4 [pid 6191] <... futex resumed>) = 0 [pid 5071] close(3 [pid 6201] close(3 [pid 6191] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6201] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6201] symlink("/dev/binderfs", "./binderfs" [pid 6198] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6202] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6201] <... symlink resumed>) = 0 [pid 6198] mkdir("./file1", 0777 [pid 6201] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] <... mkdir resumed>) = 0 [pid 6201] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6198] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6203 [pid 6201] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6203 attached [pid 6201] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6203] set_robust_list(0x5555571ca6a0, 24 [pid 6201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6199] <... ioctl resumed>) = 0 [pid 6199] close(3) = 0 [pid 6199] close(4) = 0 [pid 6191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6203] <... set_robust_list resumed>) = 0 [pid 6201] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6199] mkdir("./file1", 0777 [pid 6198] <... mount resumed>) = 0 [ 166.889055][ T6199] loop2: detected capacity change from 0 to 1024 [ 166.917185][ T6195] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.918021][ T6194] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6201] <... mprotect resumed>) = 0 [pid 6203] chdir("./63" [pid 6200] <... open resumed>) = 5 [pid 6199] <... mkdir resumed>) = 0 [pid 6198] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6203] <... chdir resumed>) = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6201] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6200] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6198] <... openat resumed>) = 3 [pid 6203] <... prctl resumed>) = 0 [pid 6201] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6200] <... futex resumed>) = 0 [pid 6198] chdir("./file1" [pid 6203] setpgid(0, 0 [pid 6201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6200] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6204 attached [pid 6203] <... setpgid resumed>) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6198] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6198] <... futex resumed>) = 1 [pid 6201] <... clone3 resumed> => {parent_tid=[6204]}, 88) = 6204 [pid 6198] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] <... openat resumed>) = 3 [pid 6201] rt_sigprocmask(SIG_SETMASK, [], [pid 6204] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6203] write(3, "1000", 4 [pid 6202] <... open resumed>) = 5 [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6199] <... mount resumed>) = 0 [pid 6196] <... futex resumed>) = 0 [pid 6194] <... write resumed>) = 53248 [pid 6204] <... rseq resumed>) = 0 [pid 6195] <... write resumed>) = 53248 [pid 6204] set_robust_list(0x7eff81ecd9a0, 24 [pid 6203] <... write resumed>) = 4 [pid 6202] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6196] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... set_robust_list resumed>) = 0 [pid 6203] close(3 [pid 6202] <... futex resumed>) = 0 [pid 6201] <... futex resumed>) = 0 [pid 6199] <... openat resumed>) = 3 [pid 6198] <... futex resumed>) = 0 [pid 6196] <... futex resumed>) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6194] <... futex resumed>) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], [pid 6203] <... close resumed>) = 0 [pid 6202] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6199] chdir("./file1" [pid 6198] creat("./file0", 000 [pid 6196] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6195] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6194] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] exit_group(0 [pid 6204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs" [pid 6200] <... futex resumed>) = ? [pid 6191] exit_group(0 [pid 6190] <... exit_group resumed>) = ? [pid 6204] memfd_create("syzkaller", 0 [pid 6203] <... symlink resumed>) = 0 [pid 6202] <... futex resumed>) = ? [pid 6200] +++ exited with 0 +++ [pid 6199] <... chdir resumed>) = 0 [pid 6198] <... creat resumed>) = 4 [pid 6195] <... futex resumed>) = ? [pid 6194] <... futex resumed>) = ? [pid 6191] <... exit_group resumed>) = ? [pid 6204] <... memfd_create resumed>) = 3 [pid 6203] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] +++ exited with 0 +++ [pid 6199] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6198] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] +++ exited with 0 +++ [pid 6194] +++ exited with 0 +++ [pid 6191] +++ exited with 0 +++ [pid 6190] +++ exited with 0 +++ [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] <... futex resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6190, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6204] <... mmap resumed>) = 0x7eff79a00000 [pid 6203] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6198] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6203] <... rt_sigaction resumed>NULL, 8) = 0 [ 166.968484][ T6194] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.969708][ T6195] hfsplus: request for non-existent node 16777216 in B*Tree [ 166.990484][ T6194] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.001123][ T6195] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6199] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6198] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6196] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6204] <... write resumed>) = 524288 [pid 6203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6196] <... futex resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5072] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6203] <... mmap resumed>) = 0x7eff81ead000 [pid 6196] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 6203] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5072] newfstatat(3, "", [pid 6203] <... mprotect resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6204] munmap(0x7eff79a00000, 138412032 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, [pid 6204] <... munmap resumed>) = 0 [pid 6203] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] newfstatat(3, "", [pid 5072] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6199] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6205 attached [pid 6203] <... clone3 resumed> => {parent_tid=[6205]}, 88) = 6205 [pid 6199] <... futex resumed>) = 1 [pid 6197] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./60/binderfs", [pid 6205] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6204] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6203] rt_sigprocmask(SIG_SETMASK, [], [pid 6199] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6204] <... openat resumed>) = 4 [pid 6203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6197] <... futex resumed>) = 0 [pid 5076] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] unlink("./60/binderfs" [pid 6205] <... rseq resumed>) = 0 [pid 6204] ioctl(4, LOOP_SET_FD, 3 [pid 6203] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... unlink resumed>) = 0 [pid 6205] set_robust_list(0x7eff81ecd9a0, 24 [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6203] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6205] <... set_robust_list resumed>) = 0 [pid 6199] creat("./file0", 000 [pid 5072] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6203] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6205] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6199] <... creat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6199] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./61/binderfs" [pid 6205] memfd_create("syzkaller", 0) = 3 [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6199] <... futex resumed>) = 1 [pid 6197] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6205] <... mmap resumed>) = 0x7eff79a00000 [ 167.065244][ T6198] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.067902][ T6204] loop4: detected capacity change from 0 to 1024 [ 167.085926][ T6198] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6197] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5076] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6197] <... futex resumed>) = 0 [pid 6197] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./60/file1", [pid 6204] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6204] close(3 [pid 5072] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6196] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6196] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6196] <... futex resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] getdents64(4, [pid 6196] <... mmap resumed>) = 0x7eff81e8c000 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./60/file1") = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./60") = 0 [pid 5072] mkdir("./61", 0777 [pid 6196] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5072] <... mkdir resumed>) = 0 [pid 6196] <... mprotect resumed>) = 0 [pid 6196] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6204] <... close resumed>) = 0 [pid 6204] close(4 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6204] <... close resumed>) = 0 [pid 6204] mkdir("./file1", 0777) = 0 [pid 6204] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5072] <... openat resumed>) = 3 [pid 6204] <... mount resumed>) = 0 [pid 6196] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6206 attached [pid 6204] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6196] <... clone3 resumed> => {parent_tid=[6206]}, 88) = 6206 [pid 5076] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6204] chdir("./file1") = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6206] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6204] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... rseq resumed>) = 0 [pid 6204] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6204] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] set_robust_list(0x7eff81eac9a0, 24 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6204] creat("./file0", 000 [pid 6201] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6196] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] <... creat resumed>) = 4 [pid 6197] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] newfstatat(AT_FDCWD, "./61/file1", [pid 6206] rt_sigprocmask(SIG_SETMASK, [], [pid 6204] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6196] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [ 167.111123][ T6199] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.127541][ T6198] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.146973][ T6199] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6204] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6197] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6196] <... futex resumed>) = 0 [pid 5076] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6206] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6204] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... mmap resumed>) = 0x7eff81e8c000 [pid 6196] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6204] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6201] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6205] <... write resumed>) = 524288 [pid 6197] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6197] <... mprotect resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", [pid 6197] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6206] <... open resumed>) = 5 [pid 6205] munmap(0x7eff79a00000, 138412032 [pid 6197] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6206] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... ioctl resumed>) = 0 [pid 6196] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 6197] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6205] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 6197] <... clone3 resumed> => {parent_tid=[6207]}, 88) = 6207 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6205] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6198] <... write resumed>) = 53248 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] close(4 [pid 6197] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 167.158926][ T6198] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.169200][ T6204] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.170405][ T6199] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.188811][ T6199] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.196341][ T6198] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.206297][ T6198] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 6208 attached ./strace-static-x86_64: Process 6207 attached [pid 6205] <... openat resumed>) = 4 [pid 6198] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 6207] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6208 [pid 6207] <... rseq resumed>) = 0 [pid 6207] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6207] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6205] ioctl(4, LOOP_SET_FD, 3 [pid 6201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6208] set_robust_list(0x5555571ca6a0, 24 [pid 6198] <... futex resumed>) = 0 [pid 6197] <... futex resumed>) = 0 [pid 6196] exit_group(0 [pid 5076] rmdir("./61/file1" [pid 6207] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6206] <... futex resumed>) = ? [pid 6201] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6196] <... exit_group resumed>) = ? [pid 6208] <... set_robust_list resumed>) = 0 [pid 6206] +++ exited with 0 +++ [pid 6201] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6208] chdir("./61" [pid 6201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6201] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6201] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6209 attached [pid 6209] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6208] <... chdir resumed>) = 0 [pid 5076] getdents64(3, [pid 6209] set_robust_list(0x7eff81eac9a0, 24 [pid 6201] <... clone3 resumed> => {parent_tid=[6209]}, 88) = 6209 [pid 6209] <... set_robust_list resumed>) = 0 [pid 6201] rt_sigprocmask(SIG_SETMASK, [], [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6201] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [ 167.221852][ T6199] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.235381][ T6204] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.242260][ T6199] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.259959][ T6205] loop0: detected capacity change from 0 to 1024 [pid 6209] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6201] <... futex resumed>) = 0 [pid 6208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6205] <... ioctl resumed>) = 0 [pid 6198] +++ exited with 0 +++ [pid 6196] +++ exited with 0 +++ [pid 5076] close(3 [pid 6208] <... prctl resumed>) = 0 [pid 6199] <... write resumed>) = 53248 [pid 5076] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6208] setpgid(0, 0 [pid 5076] rmdir("./61" [pid 6199] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... setpgid resumed>) = 0 [pid 6205] close(3 [pid 6201] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] <... open resumed>) = 5 [pid 6205] <... close resumed>) = 0 [pid 6199] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6207] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... openat resumed>) = 3 [pid 6205] close(4 [pid 6199] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] mkdir("./62", 0777 [pid 6205] <... close resumed>) = 0 [pid 6208] write(3, "1000", 4 [pid 6207] <... futex resumed>) = 1 [pid 6205] mkdir("./file1", 0777 [pid 6197] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6208] <... write resumed>) = 4 [pid 6207] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] exit_group(0 [pid 5074] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] <... futex resumed>) = ? [pid 6205] <... mkdir resumed>) = 0 [pid 6199] <... futex resumed>) = ? [pid 6197] <... exit_group resumed>) = ? [pid 6208] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 167.260909][ T6204] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6208] <... close resumed>) = 0 [pid 6205] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6199] +++ exited with 0 +++ [pid 5076] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6208] symlink("/dev/binderfs", "./binderfs" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6208] <... symlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6208] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] +++ exited with 0 +++ [pid 6197] +++ exited with 0 +++ [pid 5074] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6208] <... futex resumed>) = 0 [pid 6208] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5074] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6197, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6208] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6208] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5074] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./62/binderfs" [pid 6208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 6208] <... mmap resumed>) = 0x7eff81ead000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6208] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5073] getdents64(3, [pid 6208] <... mprotect resumed>) = 0 [pid 6208] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6208] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6208] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./61/binderfs") = 0 [pid 5073] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6210 attached [pid 6210] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6210] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6208] <... clone3 resumed> => {parent_tid=[6210]}, 88) = 6210 [pid 6210] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] rt_sigprocmask(SIG_SETMASK, [], [pid 6209] <... open resumed>) = 5 [pid 6208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6209] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... mount resumed>) = 0 [pid 6210] <... futex resumed>) = 0 [pid 6209] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6208] <... futex resumed>) = 1 [pid 6210] memfd_create("syzkaller", 0 [pid 6208] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6210] <... memfd_create resumed>) = 3 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6205] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 167.309292][ T6204] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6205] chdir("./file1" [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6205] <... chdir resumed>) = 0 [pid 5074] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] close(3 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6205] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6205] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] getdents64(4, [pid 6205] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] close(4 [pid 5073] newfstatat(AT_FDCWD, "./61/file1", [pid 6203] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] <... write resumed>) = 524288 [pid 6205] <... futex resumed>) = 0 [pid 6203] <... futex resumed>) = 1 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6211 [ 167.350904][ T6204] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] rmdir("./62/file1" [pid 5073] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6211 attached [pid 6205] creat("./file0", 000 [pid 6203] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 6205] <... creat resumed>) = 4 [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6211] set_robust_list(0x5555571ca6a0, 24 [pid 6205] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6211] <... set_robust_list resumed>) = 0 [pid 6205] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 5074] close(3 [pid 6211] chdir("./62" [pid 6205] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6203] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6211] <... chdir resumed>) = 0 [pid 6203] <... futex resumed>) = 0 [pid 5074] rmdir("./62" [pid 5073] newfstatat(4, "", [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6210] munmap(0x7eff79a00000, 138412032 [pid 6203] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6210] <... munmap resumed>) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] mkdir("./63", 0777 [pid 6210] <... openat resumed>) = 4 [pid 5073] close(4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./61/file1") = 0 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(3, [pid 6211] <... prctl resumed>) = 0 [pid 6211] setpgid(0, 0 [pid 6204] <... write resumed>) = 53248 [pid 6204] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... setpgid resumed>) = 0 [pid 6204] <... futex resumed>) = 0 [pid 6204] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] exit_group(0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6209] <... futex resumed>) = ? [pid 6204] <... futex resumed>) = ? [pid 6201] <... exit_group resumed>) = ? [pid 5073] close(3 [pid 6211] <... openat resumed>) = 3 [pid 6204] +++ exited with 0 +++ [pid 5073] <... close resumed>) = 0 [pid 6211] write(3, "1000", 4 [pid 5073] rmdir("./61" [pid 6211] <... write resumed>) = 4 [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6211] close(3 [pid 6209] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 6211] <... close resumed>) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5073] mkdir("./62", 0777 [pid 6211] <... symlink resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6211] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6211] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6210] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6211] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 6211] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5075] <... openat resumed>) = 3 [pid 6211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 167.393799][ T6204] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.419514][ T6205] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.425750][ T6210] loop1: detected capacity change from 0 to 1024 [pid 6211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6210] close(3 [pid 5075] getdents64(3, [pid 6210] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6210] close(4 [pid 5075] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6210] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] mkdir("./file1", 0777 [pid 5075] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6210] <... mkdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] unlink("./61/binderfs" [pid 6203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6211] <... mmap resumed>) = 0x7eff81ead000 [pid 5075] <... unlink resumed>) = 0 [pid 6211] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6203] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... mprotect resumed>) = 0 [pid 6203] <... futex resumed>) = 0 [pid 5075] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6211] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6211] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6203] <... mmap resumed>) = 0x7eff81e8c000 [pid 6211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6203] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6212 attached ) = 0 [pid 6212] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6211] <... clone3 resumed> => {parent_tid=[6212]}, 88) = 6212 [pid 6203] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6212] <... rseq resumed>) = 0 [pid 6211] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] set_robust_list(0x7eff81ecd9a0, 24 [pid 6203] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], [pid 6211] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... mount resumed>) = 0 [pid 6203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6211] <... futex resumed>) = 0 [pid 6210] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 167.466074][ T6205] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6211] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6210] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6213 attached [pid 6212] memfd_create("syzkaller", 0 [pid 6210] chdir("./file1" [pid 6203] <... clone3 resumed> => {parent_tid=[6213]}, 88) = 6213 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6213] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6212] <... memfd_create resumed>) = 3 [pid 6210] <... chdir resumed>) = 0 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6213] <... rseq resumed>) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6213] set_robust_list(0x7eff81eac9a0, 24 [pid 6212] <... mmap resumed>) = 0x7eff79a00000 [pid 6210] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6203] rt_sigprocmask(SIG_SETMASK, [], [pid 6213] <... set_robust_list resumed>) = 0 [pid 6210] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6210] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6213] rt_sigprocmask(SIG_SETMASK, [], [pid 6208] <... futex resumed>) = 0 [pid 6203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6203] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6203] <... futex resumed>) = 0 [pid 6208] <... futex resumed>) = 1 [pid 6210] <... futex resumed>) = 0 [pid 6210] creat("./file0", 000 [pid 6208] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6203] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] close(3 [pid 6210] <... creat resumed>) = 4 [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6210] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... futex resumed>) = 1 [pid 6208] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6214 [pid 6208] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 167.518967][ T6205] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(AT_FDCWD, "./61/file1", [pid 6208] <... futex resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6208] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", [pid 5073] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6214 attached [pid 6212] <... write resumed>) = 524288 [pid 5075] getdents64(4, [pid 5073] <... close resumed>) = 0 [pid 6214] set_robust_list(0x5555571ca6a0, 24 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6214] <... set_robust_list resumed>) = 0 [pid 6214] chdir("./63" [pid 6212] munmap(0x7eff79a00000, 138412032 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6214] <... chdir resumed>) = 0 [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6212] <... munmap resumed>) = 0 [pid 6203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6215 attached [pid 6214] <... prctl resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6215 [pid 6214] setpgid(0, 0 [pid 6215] set_robust_list(0x5555571ca6a0, 24 [pid 6214] <... setpgid resumed>) = 0 [pid 6212] <... openat resumed>) = 4 [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./61/file1") = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./61") = 0 [pid 6215] <... set_robust_list resumed>) = 0 [pid 6214] <... openat resumed>) = 3 [pid 6213] <... open resumed>) = 5 [pid 6212] <... ioctl resumed>) = 0 [pid 6208] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 167.569175][ T6205] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.594886][ T6210] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.606293][ T6212] loop5: detected capacity change from 0 to 1024 [pid 6215] chdir("./62" [pid 6208] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6213] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] close(3 [pid 6214] write(3, "1000", 4 [pid 6215] <... chdir resumed>) = 0 [pid 6213] <... futex resumed>) = 0 [pid 6212] <... close resumed>) = 0 [pid 6208] <... futex resumed>) = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6214] <... write resumed>) = 4 [pid 6213] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] close(4 [pid 6208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6215] <... prctl resumed>) = 0 [pid 6214] close(3 [pid 6212] <... close resumed>) = 0 [pid 6208] <... mmap resumed>) = 0x7eff81e8c000 [pid 6214] <... close resumed>) = 0 [pid 6212] mkdir("./file1", 0777 [pid 6208] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5075] mkdir("./62", 0777 [pid 6214] symlink("/dev/binderfs", "./binderfs" [pid 6212] <... mkdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6214] <... symlink resumed>) = 0 [pid 6215] setpgid(0, 0) = 0 [pid 6208] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6208] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6214] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, ""./strace-static-x86_64: Process 6216 attached [pid 6214] <... futex resumed>) = 0 [pid 6216] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [ 167.626178][ T6205] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.634101][ T6210] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.663423][ T6205] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6216] set_robust_list(0x7eff81eac9a0, 24 [pid 6215] <... openat resumed>) = 3 [pid 6214] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6208] <... clone3 resumed> => {parent_tid=[6216]}, 88) = 6216 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6216] <... set_robust_list resumed>) = 0 [pid 6215] write(3, "1000", 4 [pid 6214] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6215] <... write resumed>) = 4 [pid 6214] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6216] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] close(3 [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] <... openat resumed>) = 3 [pid 6216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6215] <... close resumed>) = 0 [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6215] symlink("/dev/binderfs", "./binderfs" [pid 6208] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] <... symlink resumed>) = 0 [pid 6216] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6214] <... mmap resumed>) = 0x7eff81ead000 [pid 6205] <... write resumed>) = 53248 [pid 6205] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] exit_group(0 [pid 6215] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6213] <... futex resumed>) = ? [pid 6203] <... exit_group resumed>) = ? [pid 6215] <... futex resumed>) = 0 [pid 6214] <... mprotect resumed>) = 0 [pid 6213] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 6203] +++ exited with 0 +++ [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6215] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6214] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6215] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6214] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6215] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6217 attached [pid 6216] <... open resumed>) = 5 [pid 6215] <... mmap resumed>) = 0x7eff81ead000 [pid 6214] <... clone3 resumed> => {parent_tid=[6217]}, 88) = 6217 [pid 6212] <... mount resumed>) = 0 [pid 5071] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6216] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6214] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6217] <... rseq resumed>) = 0 [pid 6216] <... futex resumed>) = 1 [pid 6215] <... mprotect resumed>) = 0 [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] <... openat resumed>) = 3 [pid 6208] <... futex resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6217] set_robust_list(0x7eff81ecd9a0, 24 [pid 6216] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6214] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] chdir("./file1" [pid 5071] <... openat resumed>) = 3 [pid 6217] <... set_robust_list resumed>) = 0 [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [ 167.672628][ T6210] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.690062][ T6210] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.713879][ T6210] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6214] <... futex resumed>) = 0 [pid 6212] <... chdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 6217] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6214] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6212] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 6218 attached [pid 6217] memfd_create("syzkaller", 0 [pid 6212] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6215] <... clone3 resumed> => {parent_tid=[6218]}, 88) = 6218 [pid 6212] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6217] <... memfd_create resumed>) = 3 [pid 6215] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 5071] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6217] <... mmap resumed>) = 0x7eff79a00000 [pid 6215] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6211] <... futex resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] <... rseq resumed>) = 0 [pid 6215] <... futex resumed>) = 0 [pid 6212] creat("./file0", 000 [pid 6211] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] set_robust_list(0x7eff81ecd9a0, 24 [pid 6215] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6218] <... set_robust_list resumed>) = 0 [pid 6212] <... creat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5071] unlink("./63/binderfs" [pid 6218] memfd_create("syzkaller", 0 [pid 5071] <... unlink resumed>) = 0 [pid 6218] <... memfd_create resumed>) = 3 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... mmap resumed>) = 0x7eff79a00000 [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6212] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6211] <... futex resumed>) = 0 [pid 6211] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6211] <... futex resumed>) = 0 [pid 6211] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [ 167.728935][ T6210] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] close(3 [pid 6210] <... write resumed>) = 53248 [pid 6210] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] exit_group(0 [pid 6210] <... futex resumed>) = ? [pid 6208] <... exit_group resumed>) = ? [pid 6210] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] <... futex resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6219 [pid 5071] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 6219 attached [pid 5071] newfstatat(4, "", [pid 6219] set_robust_list(0x5555571ca6a0, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6216] +++ exited with 0 +++ [pid 6208] +++ exited with 0 +++ [pid 5071] getdents64(4, [pid 6219] <... set_robust_list resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6208, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6219] chdir("./62" [pid 5071] getdents64(4, [pid 6219] <... chdir resumed>) = 0 [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6219] <... prctl resumed>) = 0 [pid 6218] <... write resumed>) = 524288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(4 [pid 6219] setpgid(0, 0 [pid 5072] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6217] <... write resumed>) = 524288 [pid 5072] newfstatat(3, "", [pid 5071] rmdir("./63/file1" [pid 6219] <... setpgid resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 6219] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] munmap(0x7eff79a00000, 138412032 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] write(3, "1000", 4 [pid 6218] <... munmap resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5071] getdents64(3, [pid 6219] <... write resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./61/binderfs" [pid 6219] close(3 [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6219] <... close resumed>) = 0 [pid 6218] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6219] symlink("/dev/binderfs", "./binderfs" [pid 5071] close(3 [pid 6218] <... openat resumed>) = 4 [pid 5072] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 6219] <... symlink resumed>) = 0 [pid 6218] ioctl(4, LOOP_SET_FD, 3 [pid 6217] munmap(0x7eff79a00000, 138412032 [pid 6211] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] rmdir("./63" [pid 6217] <... munmap resumed>) = 0 [pid 6211] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] <... futex resumed>) = 0 [ 167.785015][ T6212] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.818628][ T6212] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.828761][ T6218] loop2: detected capacity change from 0 to 1024 [pid 6211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6219] <... futex resumed>) = 0 [pid 6217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6211] <... mmap resumed>) = 0x7eff81e8c000 [pid 6211] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6219] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6217] <... openat resumed>) = 4 [pid 6211] <... mprotect resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6219] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] mkdir("./64", 0777 [pid 6219] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] <... mkdir resumed>) = 0 [pid 6219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... openat resumed>) = 3 [pid 6219] <... mmap resumed>) = 0x7eff81ead000 [pid 6217] ioctl(4, LOOP_SET_FD, 3 [pid 6211] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6211] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6219] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6219] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6218] <... ioctl resumed>) = 0 [pid 6217] <... ioctl resumed>) = 0 [pid 6211] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6220 attached [pid 6217] close(3 [pid 6220] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6219] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6218] close(3 [pid 6217] <... close resumed>) = 0 [pid 6211] <... clone3 resumed> => {parent_tid=[6220]}, 88) = 6220 [pid 6220] <... rseq resumed>) = 0 [pid 6219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6218] <... close resumed>) = 0 [pid 6217] close(4 [pid 6211] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6221 attached [ 167.840518][ T6212] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.849392][ T6217] loop3: detected capacity change from 0 to 1024 [ 167.857188][ T6212] hfsplus: request for non-existent node 16777216 in B*Tree [ 167.874693][ T6212] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6220] set_robust_list(0x7eff81eac9a0, 24 [pid 6218] close(4 [pid 6217] <... close resumed>) = 0 [pid 6221] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6220] <... set_robust_list resumed>) = 0 [pid 6219] <... clone3 resumed> => {parent_tid=[6221]}, 88) = 6221 [pid 6212] <... write resumed>) = 53248 [pid 6211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 6218] <... close resumed>) = 0 [pid 6221] <... rseq resumed>) = 0 [pid 6220] rt_sigprocmask(SIG_SETMASK, [], [pid 6219] rt_sigprocmask(SIG_SETMASK, [], [pid 6217] mkdir("./file1", 0777 [pid 6212] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] newfstatat(AT_FDCWD, "./61/file1", [pid 6221] set_robust_list(0x7eff81ecd9a0, 24 [pid 6220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6218] mkdir("./file1", 0777 [pid 6217] <... mkdir resumed>) = 0 [pid 6211] <... futex resumed>) = 0 [pid 5071] close(3 [pid 6221] <... set_robust_list resumed>) = 0 [pid 6220] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6219] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... mkdir resumed>) = 0 [pid 6217] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6212] <... futex resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], [pid 6220] <... open resumed>) = 5 [pid 6219] <... futex resumed>) = 0 [pid 6218] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6212] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6221] memfd_create("syzkaller", 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6221] <... memfd_create resumed>) = 3 [pid 6220] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6220] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 6221] <... mmap resumed>) = 0x7eff79a00000 [pid 6220] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] exit_group(0./strace-static-x86_64: Process 6222 attached [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6220] <... futex resumed>) = ? [pid 6212] <... futex resumed>) = ? [pid 6211] <... exit_group resumed>) = ? [ 167.890782][ T6212] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6212] +++ exited with 0 +++ [pid 6222] set_robust_list(0x5555571ca6a0, 24 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6222 [pid 6222] <... set_robust_list resumed>) = 0 [pid 6222] chdir("./64" [pid 6220] +++ exited with 0 +++ [pid 6211] +++ exited with 0 +++ [pid 5072] newfstatat(4, "", [pid 6222] <... chdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6222] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6222] <... prctl resumed>) = 0 [pid 5072] getdents64(4, [pid 5076] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] setpgid(0, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 6222] <... setpgid resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 5076] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 6217] <... mount resumed>) = 0 [pid 6217] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5072] <... close resumed>) = 0 [pid 6222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6221] <... write resumed>) = 524288 [pid 6218] <... mount resumed>) = 0 [pid 6217] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./61/file1" [pid 6221] munmap(0x7eff79a00000, 138412032 [pid 6218] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(3, [pid 6222] <... openat resumed>) = 3 [pid 6218] <... openat resumed>) = 3 [pid 6217] chdir("./file1" [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... rmdir resumed>) = 0 [pid 6218] chdir("./file1" [pid 5076] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6221] <... munmap resumed>) = 0 [pid 6218] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6218] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6218] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6221] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6218] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./62/binderfs" [pid 6218] <... futex resumed>) = 1 [pid 6215] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6221] <... openat resumed>) = 4 [pid 6218] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6217] <... chdir resumed>) = 0 [pid 6215] <... futex resumed>) = 0 [pid 5072] getdents64(3, [pid 6222] write(3, "1000", 4 [pid 6221] ioctl(4, LOOP_SET_FD, 3 [pid 6218] creat("./file0", 000 [pid 6215] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = 0 [pid 6222] <... write resumed>) = 4 [pid 6217] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6222] close(3 [pid 6217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 6222] <... close resumed>) = 0 [pid 6221] <... ioctl resumed>) = 0 [pid 6218] <... creat resumed>) = 4 [pid 6217] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 6222] symlink("/dev/binderfs", "./binderfs" [pid 6221] close(3 [pid 6218] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = 1 [pid 6214] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] rmdir("./61" [pid 6222] <... symlink resumed>) = 0 [pid 6221] <... close resumed>) = 0 [pid 6218] <... futex resumed>) = 1 [pid 6217] creat("./file0", 000 [pid 6215] <... futex resumed>) = 0 [pid 6214] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(AT_FDCWD, "./62/file1", [pid 6222] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] close(4 [pid 6218] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6222] <... futex resumed>) = 0 [pid 6221] <... close resumed>) = 0 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6217] <... creat resumed>) = 4 [pid 6215] <... futex resumed>) = 0 [pid 6214] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6221] mkdir("./file1", 0777 [pid 6218] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6217] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] mkdir("./62", 0777 [pid 6221] <... mkdir resumed>) = 0 [pid 6217] <... futex resumed>) = 0 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5076] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6222] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6221] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6217] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6214] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 [pid 5072] <... mkdir resumed>) = 0 [pid 6222] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6214] <... futex resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6214] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] getdents64(4, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6222] <... mmap resumed>) = 0x7eff81ead000 [pid 6221] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... openat resumed>) = 3 [pid 6222] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] getdents64(4, [pid 6221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6222] <... mprotect resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [ 168.021917][ T6221] loop4: detected capacity change from 0 to 1024 [pid 6222] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6221] <... openat resumed>) = 3 [pid 5076] close(4 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6221] chdir("./file1" [pid 5076] <... close resumed>) = 0 [pid 6222] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] rmdir("./62/file1" [pid 6222] <... clone3 resumed> => {parent_tid=[6223]}, 88) = 6223 [pid 5076] <... rmdir resumed>) = 0 [pid 6222] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] getdents64(3, [pid 6222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6222] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3) = 0 [pid 6222] <... futex resumed>) = 0 [pid 5076] rmdir("./62") = 0 [pid 6222] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] mkdir("./63", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6223 attached [pid 6221] <... chdir resumed>) = 0 [pid 6215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6221] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6223] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6215] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6223] <... rseq resumed>) = 0 [pid 6215] <... mmap resumed>) = 0x7eff81e8c000 [pid 6223] set_robust_list(0x7eff81ecd9a0, 24 [pid 6221] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6215] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6223] <... set_robust_list resumed>) = 0 [pid 6223] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] <... mprotect resumed>) = 0 [pid 6223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6221] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6223] memfd_create("syzkaller", 0 [pid 6221] <... futex resumed>) = 1 [pid 6219] <... futex resumed>) = 0 [pid 6219] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] creat("./file0", 000 [pid 6223] <... memfd_create resumed>) = 3 [pid 6219] <... futex resumed>) = 0 [pid 6215] <... clone3 resumed> => {parent_tid=[6224]}, 88) = 6224 [pid 6219] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6215] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6215] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6224 attached [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6221] <... creat resumed>) = 4 [pid 6215] <... futex resumed>) = 0 [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6224] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6215] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] <... rseq resumed>) = 0 [pid 6214] <... futex resumed>) = 0 [pid 6224] set_robust_list(0x7eff81eac9a0, 24 [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6224] <... set_robust_list resumed>) = 0 [pid 6214] <... mmap resumed>) = 0x7eff81e8c000 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], [pid 6214] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6214] <... mprotect resumed>) = 0 [ 168.075745][ T6218] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.083445][ T6217] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.091974][ T6217] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.097113][ T6218] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6224] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6214] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6225]}, 88) = 6225 [pid 6214] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6225 attached [pid 6214] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6214] <... futex resumed>) = 0 [pid 6225] <... rseq resumed>) = 0 [pid 6224] <... open resumed>) = 5 [pid 6214] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6225] set_robust_list(0x7eff81eac9a0, 24 [pid 6224] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... mmap resumed>) = 0x7eff79a00000 [pid 6221] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] <... futex resumed>) = 0 [pid 6224] <... futex resumed>) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6225] <... set_robust_list resumed>) = 0 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], [pid 6224] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6219] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6219] <... futex resumed>) = 0 [pid 6225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... ioctl resumed>) = 0 [pid 6225] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5072] close(3 [pid 6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6226 attached [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6226 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6227 [ 168.122574][ T6217] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.130675][ T6218] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.130696][ T6218] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.142623][ T6218] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6226] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6226] chdir("./62") = 0 [pid 6226] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6226] setpgid(0, 0./strace-static-x86_64: Process 6227 attached ) = 0 [pid 6223] <... write resumed>) = 524288 [pid 6219] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6226] write(3, "1000", 4) = 4 [pid 6226] close(3) = 0 [pid 6226] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6226] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6226] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6227] set_robust_list(0x5555571ca6a0, 24 [pid 6226] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6223] munmap(0x7eff79a00000, 138412032 [pid 6219] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [ 168.196107][ T6218] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.196130][ T6221] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.196152][ T6221] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.222866][ T6217] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.237913][ T6217] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6226] <... mprotect resumed>) = 0 [pid 6226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6225] <... open resumed>) = 5 [pid 6227] <... set_robust_list resumed>) = 0 [pid 6223] <... munmap resumed>) = 0 [pid 6219] <... futex resumed>) = 0 [pid 6226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6225] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... write resumed>) = 53248 [pid 6226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6225] <... futex resumed>) = 0 [pid 6219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6227] chdir("./63" [pid 6225] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] <... mmap resumed>) = 0x7eff81e8c000 ./strace-static-x86_64: Process 6228 attached [pid 6227] <... chdir resumed>) = 0 [pid 6226] <... clone3 resumed> => {parent_tid=[6228]}, 88) = 6228 [pid 6223] <... openat resumed>) = 4 [pid 6218] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6226] rt_sigprocmask(SIG_SETMASK, [], [pid 6223] ioctl(4, LOOP_SET_FD, 3 [pid 6219] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6218] <... futex resumed>) = 0 [pid 6215] exit_group(0 [pid 6228] <... rseq resumed>) = 0 [pid 6227] <... prctl resumed>) = 0 [pid 6226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6224] <... futex resumed>) = ? [pid 6215] <... exit_group resumed>) = ? [pid 6226] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] +++ exited with 0 +++ [pid 6218] +++ exited with 0 +++ [pid 6226] <... futex resumed>) = 0 [pid 6226] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6215] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6228] set_robust_list(0x7eff81ecd9a0, 24 [pid 6227] setpgid(0, 0 [pid 6219] <... mprotect resumed>) = 0 [pid 6228] <... set_robust_list resumed>) = 0 [pid 6227] <... setpgid resumed>) = 0 [pid 6223] <... ioctl resumed>) = 0 [ 168.239767][ T6221] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.253974][ T6221] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.265018][ T6217] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.274214][ T6223] loop0: detected capacity change from 0 to 1024 [ 168.284220][ T6221] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6228] rt_sigprocmask(SIG_SETMASK, [], [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6223] close(3 [pid 6221] <... write resumed>) = 53248 [pid 6219] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6217] <... write resumed>) = 53248 [pid 6228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6227] <... openat resumed>) = 3 [pid 6223] <... close resumed>) = 0 [pid 6221] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6217] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] memfd_create("syzkaller", 0 [pid 6227] write(3, "1000", 4 [pid 6223] close(4 [pid 6221] <... futex resumed>) = 0 [pid 6219] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6228] <... memfd_create resumed>) = 3 [pid 6227] <... write resumed>) = 4 [pid 6223] <... close resumed>) = 0 [pid 6217] <... futex resumed>) = 0 [pid 6214] exit_group(0 [pid 6227] close(3 [pid 6225] <... futex resumed>) = ? [pid 6223] mkdir("./file1", 0777 [pid 6214] <... exit_group resumed>) = ? [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6227] <... close resumed>) = 0 [pid 6225] +++ exited with 0 +++ [pid 6223] <... mkdir resumed>) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs" [pid 6217] +++ exited with 0 +++ [pid 6214] +++ exited with 0 +++ [ 168.292884][ T6221] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6227] <... symlink resumed>) = 0 [pid 5073] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] <... futex resumed>) = 0 [pid 6227] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5073] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6228] <... mmap resumed>) = 0x7eff79a00000 [pid 6227] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6229 attached [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6227] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6223] <... mount resumed>) = 0 [pid 6221] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] <... clone3 resumed> => {parent_tid=[6229]}, 88) = 6229 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6229] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6228] <... write resumed>) = 524288 [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6223] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6219] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] newfstatat(3, "", [pid 6229] <... rseq resumed>) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6223] <... openat resumed>) = 3 [pid 6219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6229] set_robust_list(0x7eff81eac9a0, 24 [pid 6227] <... mmap resumed>) = 0x7eff81ead000 [pid 6223] chdir("./file1" [pid 6219] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 6229] <... set_robust_list resumed>) = 0 [pid 6227] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6223] <... chdir resumed>) = 0 [pid 6219] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6229] rt_sigprocmask(SIG_SETMASK, [], [pid 6227] <... mprotect resumed>) = 0 [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6219] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6229] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6227] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(3, [pid 5073] unlink("./62/binderfs"./strace-static-x86_64: Process 6230 attached [pid 6229] <... open resumed>) = 5 [pid 6227] <... clone3 resumed> => {parent_tid=[6230]}, 88) = 6230 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... unlink resumed>) = 0 [pid 6230] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6228] munmap(0x7eff79a00000, 138412032 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... rseq resumed>) = 0 [pid 6229] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... munmap resumed>) = 0 [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6223] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] set_robust_list(0x7eff81ecd9a0, 24 [pid 6227] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 0 [pid 6229] <... futex resumed>) = 1 [pid 5074] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6230] <... set_robust_list resumed>) = 0 [pid 6229] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] <... futex resumed>) = 0 [pid 6223] <... futex resumed>) = 1 [pid 6222] <... futex resumed>) = 0 [pid 6219] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6228] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6227] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6223] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6222] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] <... futex resumed>) = ? [pid 6219] <... exit_group resumed>) = ? [pid 5074] unlink("./63/binderfs" [pid 6230] rt_sigprocmask(SIG_SETMASK, [], [pid 6229] <... futex resumed>) = ? [pid 6228] <... openat resumed>) = 4 [pid 6223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6222] <... futex resumed>) = 0 [pid 6221] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 6223] creat("./file0", 000 [pid 5074] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6229] +++ exited with 0 +++ [pid 6223] <... creat resumed>) = 4 [pid 6222] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] +++ exited with 0 +++ [pid 6230] memfd_create("syzkaller", 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5075] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6230] <... memfd_create resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6230] <... mmap resumed>) = 0x7eff79a00000 [pid 6223] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6223] <... futex resumed>) = 1 [pid 6222] <... futex resumed>) = 0 [pid 5075] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] <... futex resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6222] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./62/binderfs") = 0 [pid 6223] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5075] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6228] close(3) = 0 [pid 5073] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6228] close(4 [pid 5073] newfstatat(AT_FDCWD, "./62/file1", [pid 6228] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6228] mkdir("./file1", 0777 [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6228] <... mkdir resumed>) = 0 [pid 6228] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [ 168.389214][ T6228] loop1: detected capacity change from 0 to 1024 [ 168.418343][ T6223] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] <... umount2 resumed>) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./62/file1" [pid 6222] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6222] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... rmdir resumed>) = 0 [pid 6222] <... futex resumed>) = 0 [pid 6222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6230] <... write resumed>) = 524288 [pid 6222] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6222] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6222] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6231 attached [pid 5073] getdents64(3, [pid 6231] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6222] <... clone3 resumed> => {parent_tid=[6231]}, 88) = 6231 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6231] <... rseq resumed>) = 0 [pid 6230] munmap(0x7eff79a00000, 138412032 [pid 6228] <... mount resumed>) = 0 [pid 6222] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 6231] set_robust_list(0x7eff81eac9a0, 24 [pid 6228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] newfstatat(AT_FDCWD, "./63/file1", [pid 5073] <... close resumed>) = 0 [pid 6231] <... set_robust_list resumed>) = 0 [pid 6230] <... munmap resumed>) = 0 [pid 6228] <... openat resumed>) = 3 [pid 6222] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] rmdir("./62" [pid 6231] rt_sigprocmask(SIG_SETMASK, [], [pid 6228] chdir("./file1" [pid 6222] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6222] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6231] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5075] newfstatat(AT_FDCWD, "./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] mkdir("./63", 0777 [pid 5075] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] newfstatat(4, "", [pid 5073] <... openat resumed>) = 3 [ 168.450346][ T6223] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.470065][ T6223] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.487254][ T6223] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4) = 0 [pid 5075] rmdir("./62/file1") = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./62") = 0 [pid 5075] mkdir("./63", 0777 [pid 6230] <... openat resumed>) = 4 [pid 6228] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5074] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 6231] <... open resumed>) = 5 [pid 6228] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... mkdir resumed>) = 0 [pid 6231] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6222] <... futex resumed>) = 0 [pid 6231] <... futex resumed>) = 1 [pid 6231] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6230] <... ioctl resumed>) = 0 [pid 6228] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 4 [pid 6230] close(3 [pid 6228] <... futex resumed>) = 1 [pid 6226] <... futex resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6230] <... close resumed>) = 0 [pid 6228] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6226] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6230] close(4 [pid 6228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6226] <... futex resumed>) = 0 [pid 5074] getdents64(4, [pid 6230] <... close resumed>) = 0 [pid 6228] creat("./file0", 000 [pid 6226] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6230] mkdir("./file1", 0777 [pid 6228] <... creat resumed>) = 4 [pid 5074] getdents64(4, [pid 6230] <... mkdir resumed>) = 0 [pid 6228] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6228] <... futex resumed>) = 1 [pid 6226] <... futex resumed>) = 0 [pid 5074] close(4 [ 168.495397][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 168.495417][ T28] audit: type=1800 audit(1708423246.105:381): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 168.525331][ T6230] loop5: detected capacity change from 0 to 1024 [ 168.534933][ T6223] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6230] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6228] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6226] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 6228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6226] <... futex resumed>) = 0 [pid 5074] rmdir("./63/file1" [pid 6228] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6226] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./63") = 0 [pid 5074] mkdir("./64", 0777) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6230] <... mount resumed>) = 0 [pid 6230] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6230] chdir("./file1") = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6230] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6230] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] creat("./file0", 000 [pid 5073] close(3 [pid 6227] <... futex resumed>) = 0 [pid 6230] <... creat resumed>) = 4 [pid 6227] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 168.570094][ T6223] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6230] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 6232 attached [pid 6230] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6227] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6230] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6226] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6223] <... write resumed>) = 53248 [pid 6226] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6223] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] <... mprotect resumed>) = 0 [pid 6223] <... futex resumed>) = 0 [pid 6226] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6223] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6226] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6226] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6227] <... futex resumed>) = 0 [pid 6226] <... clone3 resumed> => {parent_tid=[6233]}, 88) = 6233 [pid 6226] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6234 attached ./strace-static-x86_64: Process 6233 attached [pid 6232] set_robust_list(0x5555571ca6a0, 24 [pid 6227] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6232 [pid 5074] <... ioctl resumed>) = 0 [pid 6234] set_robust_list(0x5555571ca6a0, 24 [pid 6233] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6222] exit_group(0 [pid 6234] <... set_robust_list resumed>) = 0 [pid 6233] <... rseq resumed>) = 0 [pid 6232] <... set_robust_list resumed>) = 0 [pid 6222] <... exit_group resumed>) = ? [pid 6231] <... futex resumed>) = ? [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6234 [pid 6233] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6234] chdir("./63" [pid 6233] rt_sigprocmask(SIG_SETMASK, [], [pid 6232] chdir("./63" [pid 6231] +++ exited with 0 +++ [pid 6226] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = ? [pid 6234] <... chdir resumed>) = 0 [pid 6233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 6226] <... futex resumed>) = 0 [pid 6223] +++ exited with 0 +++ [pid 6222] +++ exited with 0 +++ [ 168.633004][ T6228] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.640363][ T6228] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.664990][ T6230] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] close(3 [pid 6234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6226] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6222, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6235 attached [pid 6234] <... prctl resumed>) = 0 [pid 6232] <... prctl resumed>) = 0 [pid 6227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6235] set_robust_list(0x5555571ca6a0, 24 [pid 6234] setpgid(0, 0 [pid 6232] setpgid(0, 0 [pid 6227] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6235 [pid 5071] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... set_robust_list resumed>) = 0 [pid 6234] <... setpgid resumed>) = 0 [pid 6232] <... setpgid resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6235] chdir("./64" [pid 6234] <... openat resumed>) = 3 [pid 6232] <... openat resumed>) = 3 [pid 6227] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... openat resumed>) = 3 [pid 6234] write(3, "1000", 4 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] newfstatat(3, "", [pid 6234] <... write resumed>) = 4 [pid 6232] write(3, "1000", 4 [pid 6227] <... mmap resumed>) = 0x7eff81e8c000 [pid 6234] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6234] <... close resumed>) = 0 [pid 6232] <... write resumed>) = 4 [pid 6234] symlink("/dev/binderfs", "./binderfs" [pid 6232] close(3 [pid 6227] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5071] getdents64(3, [pid 6235] <... chdir resumed>) = 0 [pid 6232] <... close resumed>) = 0 [ 168.693374][ T6230] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.701950][ T6228] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.709445][ T28] audit: type=1800 audit(1708423246.315:382): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 168.735145][ T6230] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6234] <... symlink resumed>) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs" [pid 6227] <... mprotect resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... prctl resumed>) = 0 [pid 6234] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... open resumed>) = 5 [pid 6232] <... symlink resumed>) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6233] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] setpgid(0, 0 [pid 6234] <... futex resumed>) = 0 [pid 6227] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... setpgid resumed>) = 0 [pid 6234] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6232] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6234] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6232] <... futex resumed>) = 0 [pid 6227] <... clone3 resumed> => {parent_tid=[6236]}, 88) = 6236 [pid 5071] unlink("./64/binderfs"./strace-static-x86_64: Process 6236 attached [pid 6235] <... openat resumed>) = 3 [pid 6234] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6232] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6227] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... unlink resumed>) = 0 [pid 6235] write(3, "1000", 4 [pid 6234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6235] <... write resumed>) = 4 [ 168.762325][ T6228] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.771846][ T6230] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.786529][ T6228] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.799779][ T6228] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6236] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6235] close(3 [pid 6232] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6227] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] <... rseq resumed>) = 0 [pid 6236] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6235] <... close resumed>) = 0 [pid 6234] <... mmap resumed>) = 0x7eff81ead000 [pid 6232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6227] <... futex resumed>) = 0 [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6236] <... open resumed>) = 5 [pid 6234] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6230] <... write resumed>) = 53248 [pid 6228] <... write resumed>) = 53248 [pid 6227] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... symlink resumed>) = 0 [pid 6234] <... mprotect resumed>) = 0 [pid 6232] <... mmap resumed>) = 0x7eff81ead000 [pid 6230] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] exit_group(0 [pid 6236] <... futex resumed>) = 0 [pid 6235] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6233] <... futex resumed>) = ? [pid 6232] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6230] <... futex resumed>) = 0 [pid 6228] <... futex resumed>) = ? [pid 6227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6226] <... exit_group resumed>) = ? [pid 6236] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... futex resumed>) = 0 [pid 6234] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6233] +++ exited with 0 +++ [pid 6232] <... mprotect resumed>) = 0 [pid 6230] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] +++ exited with 0 +++ [pid 6227] exit_group(0 [pid 5071] <... umount2 resumed>) = 0 [pid 6235] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6234] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6236] <... futex resumed>) = ? [pid 6230] <... futex resumed>) = ? [pid 6227] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6237 attached [pid 6236] +++ exited with 0 +++ [pid 6235] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6232] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6230] +++ exited with 0 +++ [pid 5071] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6226, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6234] <... clone3 resumed> => {parent_tid=[6237]}, 88) = 6237 [pid 6237] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6234] rt_sigprocmask(SIG_SETMASK, [], [pid 6232] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6237] <... rseq resumed>) = 0 [pid 6235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6237] set_robust_list(0x7eff81ecd9a0, 24 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6238 attached [pid 6237] <... set_robust_list resumed>) = 0 [pid 6235] <... mmap resumed>) = 0x7eff81ead000 [pid 6234] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] newfstatat(4, "", [pid 6238] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6237] rt_sigprocmask(SIG_SETMASK, [], [pid 6235] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6234] <... futex resumed>) = 0 [pid 6232] <... clone3 resumed> => {parent_tid=[6238]}, 88) = 6238 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5072] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6238] <... rseq resumed>) = 0 [pid 6237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6235] <... mprotect resumed>) = 0 [pid 6234] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6232] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 6238] set_robust_list(0x7eff81ecd9a0, 24 [pid 6237] memfd_create("syzkaller", 0 [pid 6235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6238] <... set_robust_list resumed>) = 0 [pid 6235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6232] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6238] rt_sigprocmask(SIG_SETMASK, [], [pid 6237] <... memfd_create resumed>) = 3 [pid 6235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6232] <... futex resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 5071] getdents64(4, [pid 6238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6238] memfd_create("syzkaller", 0 [pid 6237] <... mmap resumed>) = 0x7eff79a00000 [pid 6235] <... clone3 resumed> => {parent_tid=[6239]}, 88) = 6239 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, ./strace-static-x86_64: Process 6239 attached [pid 6238] <... memfd_create resumed>) = 3 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6235] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6238] <... mmap resumed>) = 0x7eff79a00000 [pid 5072] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6235] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6239] <... rseq resumed>) = 0 [pid 6239] set_robust_list(0x7eff81ecd9a0, 24 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./62/binderfs" [pid 6239] <... set_robust_list resumed>) = 0 [pid 5071] close(4 [pid 6239] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... close resumed>) = 0 [pid 6239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] rmdir("./64/file1" [pid 5072] <... unlink resumed>) = 0 [pid 6239] memfd_create("syzkaller", 0 [pid 5072] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6239] <... memfd_create resumed>) = 3 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 5071] getdents64(3, [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [ 168.801848][ T6230] hfsplus: request for non-existent node 16777216 in B*Tree [ 168.813967][ T28] audit: type=1800 audit(1708423246.435:383): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 168.816760][ T6230] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] close(3 [pid 5076] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./64") = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6238] <... write resumed>) = 524288 [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] mkdir("./65", 0777 [pid 6238] munmap(0x7eff79a00000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./62/file1", [pid 6239] <... write resumed>) = 524288 [pid 6238] <... munmap resumed>) = 0 [pid 5076] unlink("./63/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6239] munmap(0x7eff79a00000, 138412032 [pid 6238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6237] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 6237] munmap(0x7eff79a00000, 138412032 [pid 5072] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 6237] <... munmap resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... close resumed>) = 0 [pid 6239] <... munmap resumed>) = 0 [pid 6237] <... openat resumed>) = 4 [pid 5072] rmdir("./62/file1" [pid 6239] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6238] <... openat resumed>) = 4 [pid 5076] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6237] ioctl(4, LOOP_SET_FD, 3 [pid 5072] <... rmdir resumed>) = 0 [pid 6239] <... openat resumed>) = 4 [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 5072] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./62") = 0 [pid 5072] mkdir("./63", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6237] <... ioctl resumed>) = 0 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6238] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6237] close(3) = 0 [pid 6237] close(4) = 0 [pid 6237] mkdir("./file1", 0777) = 0 [pid 6239] <... ioctl resumed>) = 0 [pid 6238] close(3 [pid 5076] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6239] close(3 [pid 6238] <... close resumed>) = 0 [pid 6237] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] close(4 [pid 5076] newfstatat(AT_FDCWD, "./63/file1", [pid 6238] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6238] mkdir("./file1", 0777 [pid 6239] <... close resumed>) = 0 [pid 6238] <... mkdir resumed>) = 0 [pid 5076] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 6239] close(4 [pid 6238] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6237] <... mount resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 6239] <... close resumed>) = 0 [ 168.946207][ T6237] loop2: detected capacity change from 0 to 1024 [ 168.954325][ T6238] loop4: detected capacity change from 0 to 1024 [ 168.971819][ T6239] loop3: detected capacity change from 0 to 1024 [pid 6239] mkdir("./file1", 0777 [pid 6237] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6237] chdir("./file1") = 0 [pid 6237] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6237] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... mkdir resumed>) = 0 [pid 6239] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5071] close(3 [pid 6237] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6234] <... futex resumed>) = 0 [pid 6234] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = 0 [pid 6234] <... futex resumed>) = 1 [pid 6237] creat("./file0", 000 [pid 6234] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] <... creat resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 6237] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6237] <... futex resumed>) = 1 [pid 6234] <... futex resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6237] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6234] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 [pid 6234] <... futex resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6234] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5072] close(3 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 5072] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6240 ./strace-static-x86_64: Process 6240 attached [pid 5076] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6240] set_robust_list(0x5555571ca6a0, 24 [pid 5076] rmdir("./63/file1" [pid 6240] <... set_robust_list resumed>) = 0 [pid 6240] chdir("./65"./strace-static-x86_64: Process 6241 attached [pid 5076] <... rmdir resumed>) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 6240] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6241 [pid 5076] getdents64(3, [pid 6241] set_robust_list(0x5555571ca6a0, 24 [pid 6240] <... prctl resumed>) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6238] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6240] setpgid(0, 0 [pid 6241] <... set_robust_list resumed>) = 0 [pid 6240] <... setpgid resumed>) = 0 [pid 6239] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] close(3 [pid 6240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6239] <... openat resumed>) = 3 [pid 6238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... close resumed>) = 0 [pid 6239] chdir("./file1" [pid 5076] rmdir("./63" [pid 6239] <... chdir resumed>) = 0 [pid 6241] chdir("./63" [pid 6240] <... openat resumed>) = 3 [pid 6239] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6238] <... openat resumed>) = 3 [pid 6234] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6240] write(3, "1000", 4 [pid 6239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6238] chdir("./file1" [pid 6234] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... chdir resumed>) = 0 [pid 6240] <... write resumed>) = 4 [pid 6239] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... chdir resumed>) = 0 [pid 6234] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6240] close(3 [pid 6238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6234] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6240] <... close resumed>) = 0 [pid 6238] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6234] <... mmap resumed>) = 0x7eff81e8c000 [pid 6240] symlink("/dev/binderfs", "./binderfs" [pid 6238] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6238] <... futex resumed>) = 1 [pid 6234] <... mprotect resumed>) = 0 [pid 6240] <... symlink resumed>) = 0 [pid 6238] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6234] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6234] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6242]}, 88) = 6242 [pid 6240] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] rt_sigprocmask(SIG_SETMASK, [], [pid 6232] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6242 attached [pid 6240] <... futex resumed>) = 0 [pid 6234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6240] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6238] <... futex resumed>) = 0 [pid 6234] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 1 [pid 6239] <... futex resumed>) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6240] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6238] creat("./file0", 000 [pid 6234] <... futex resumed>) = 0 [pid 5076] mkdir("./64", 0777 [pid 6242] <... rseq resumed>) = 0 [pid 6240] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6238] <... creat resumed>) = 4 [pid 6235] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] set_robust_list(0x7eff81eac9a0, 24 [pid 6240] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 169.066971][ T6237] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.077676][ T6237] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.087123][ T6237] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.100690][ T6237] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6238] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] <... set_robust_list resumed>) = 0 [pid 6241] <... prctl resumed>) = 0 [pid 6240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6239] creat("./file0", 000 [pid 6235] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], [pid 6241] setpgid(0, 0 [pid 6240] <... mmap resumed>) = 0x7eff81ead000 [pid 6239] <... creat resumed>) = 4 [pid 6238] <... futex resumed>) = 0 [pid 6235] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6241] <... setpgid resumed>) = 0 [pid 6238] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6232] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6239] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6240] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6241] <... openat resumed>) = 3 [pid 6242] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6240] <... mprotect resumed>) = 0 [pid 6239] <... futex resumed>) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6241] write(3, "1000", 4 [pid 6240] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6239] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 169.120676][ T6237] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.138957][ T28] audit: type=1800 audit(1708423246.755:384): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 169.152088][ T6237] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6235] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... write resumed>) = 4 [pid 6235] <... futex resumed>) = 0 [pid 6240] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6234] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6240] <... clone3 resumed> => {parent_tid=[6243]}, 88) = 6243 [pid 6235] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6241] close(3./strace-static-x86_64: Process 6243 attached ) = 0 [pid 6240] rt_sigprocmask(SIG_SETMASK, [], [pid 6243] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6241] symlink("/dev/binderfs", "./binderfs" [pid 6240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6240] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... symlink resumed>) = 0 [pid 6243] <... rseq resumed>) = 0 [pid 6243] set_robust_list(0x7eff81ecd9a0, 24 [pid 6241] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... set_robust_list resumed>) = 0 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], [pid 6240] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = 0 [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6240] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6232] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6243] memfd_create("syzkaller", 0 [pid 6232] <... mprotect resumed>) = 0 [pid 6232] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6243] <... memfd_create resumed>) = 3 [pid 6232] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] <... clone3 resumed> => {parent_tid=[6244]}, 88) = 6244 [pid 6243] <... mmap resumed>) = 0x7eff79a00000 [pid 6241] <... futex resumed>) = 0 [pid 6232] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6241] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6232] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6241] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6244 attached [pid 6243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6241] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] <... ioctl resumed>) = 0 [pid 6241] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 169.169905][ T6238] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.174985][ T6239] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.204320][ T6238] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6244] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6241] <... mmap resumed>) = 0x7eff81ead000 [pid 6237] <... write resumed>) = 53248 [pid 5076] close(3 [pid 6241] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... close resumed>) = 0 [pid 6244] <... rseq resumed>) = 0 [pid 6242] <... open resumed>) = 5 [pid 6241] <... mprotect resumed>) = 0 [pid 6237] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] set_robust_list(0x7eff81eac9a0, 24 [pid 6242] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... set_robust_list resumed>) = 0 [pid 6242] <... futex resumed>) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], [pid 6242] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6237] <... futex resumed>) = 0 [pid 6244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6244] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6234] exit_group(0 [pid 6241] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6237] read(-256, [pid 6242] <... futex resumed>) = ? [pid 6241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6234] <... exit_group resumed>) = ? [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6245 attached [pid 6242] +++ exited with 0 +++ [pid 6237] +++ exited with 0 +++ [pid 6235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6234] +++ exited with 0 +++ [ 169.219552][ T6239] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.241504][ T28] audit: type=1800 audit(1708423246.855:385): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 169.263049][ T6238] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6243] <... write resumed>) = 524288 [pid 6241] <... clone3 resumed> => {parent_tid=[6245]}, 88) = 6245 [pid 6235] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6245] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6234, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6245] <... rseq resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6245] set_robust_list(0x7eff81ecd9a0, 24 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6246 attached [pid 6246] set_robust_list(0x5555571ca6a0, 24 [pid 5073] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6246] <... set_robust_list resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6246] chdir("./64" [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6246] <... chdir resumed>) = 0 [pid 5073] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./63/binderfs") = 0 [pid 5073] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] <... set_robust_list resumed>) = 0 [pid 6235] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6246 [pid 6246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6245] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6245] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] rt_sigprocmask(SIG_SETMASK, [], [pid 6235] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6246] <... prctl resumed>) = 0 [pid 6246] setpgid(0, 0) = 0 [pid 6246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6246] write(3, "1000", 4) = 4 [pid 6235] <... mprotect resumed>) = 0 [pid 6241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6241] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6241] <... futex resumed>) = 1 [ 169.270371][ T6238] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.279902][ T6239] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6246] close(3 [pid 6245] memfd_create("syzkaller", 0 [pid 6243] munmap(0x7eff79a00000, 138412032 [pid 6241] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6246] <... close resumed>) = 0 [pid 6245] <... memfd_create resumed>) = 3 [pid 6235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6243] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6246] symlink("/dev/binderfs", "./binderfs" [pid 6245] <... mmap resumed>) = 0x7eff79a00000 [pid 6235] <... clone3 resumed> => {parent_tid=[6247]}, 88) = 6247 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6247 attached [pid 6246] <... symlink resumed>) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6246] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6235] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6247] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6246] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6244] <... open resumed>) = 5 [pid 6243] <... openat resumed>) = 4 [pid 5073] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6247] <... rseq resumed>) = 0 [pid 6246] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6244] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] ioctl(4, LOOP_SET_FD, 3 [pid 6246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6244] <... futex resumed>) = 0 [pid 6246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6244] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6247] set_robust_list(0x7eff81eac9a0, 24 [pid 6246] <... mmap resumed>) = 0x7eff81ead000 [pid 6247] <... set_robust_list resumed>) = 0 [ 169.312191][ T6239] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.340930][ T6243] loop0: detected capacity change from 0 to 1024 [ 169.350570][ T6238] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6247] rt_sigprocmask(SIG_SETMASK, [], [pid 6246] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] newfstatat(AT_FDCWD, "./63/file1", [pid 6247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6247] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6246] <... mprotect resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6247] <... open resumed>) = 5 [pid 6246] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6245] <... write resumed>) = 524288 [pid 5073] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./63/file1" [pid 6235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... rmdir resumed>) = 0 [pid 6246] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] getdents64(3, [pid 6247] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... ioctl resumed>) = 0 [pid 6247] <... futex resumed>) = 0 [pid 6246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6243] close(3 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6247] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] <... close resumed>) = 0 [pid 6243] close(4) = 0 [pid 6243] mkdir("./file1", 0777 [pid 5073] close(3 [pid 6246] <... clone3 resumed> => {parent_tid=[6248]}, 88) = 6248 [pid 6243] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 6248 attached [pid 6246] rt_sigprocmask(SIG_SETMASK, [], [ 169.360865][ T28] audit: type=1800 audit(1708423246.985:386): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 169.391271][ T6238] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] rmdir("./63" [pid 6248] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6248] <... rseq resumed>) = 0 [pid 6246] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] mkdir("./64", 0777 [pid 6248] set_robust_list(0x7eff81ecd9a0, 24 [pid 6246] <... futex resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6243] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6245] munmap(0x7eff79a00000, 138412032 [pid 6248] <... set_robust_list resumed>) = 0 [pid 6246] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6248] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6248] memfd_create("syzkaller", 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6248] <... memfd_create resumed>) = 3 [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6245] <... munmap resumed>) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6238] <... write resumed>) = 53248 [pid 6238] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] exit_group(0 [pid 6244] <... futex resumed>) = ? [pid 6232] <... exit_group resumed>) = ? [pid 6245] ioctl(4, LOOP_SET_FD, 3 [pid 6244] +++ exited with 0 +++ [pid 6243] <... mount resumed>) = 0 [pid 6245] <... ioctl resumed>) = 0 [pid 6243] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6238] +++ exited with 0 +++ [pid 6232] +++ exited with 0 +++ [pid 6245] close(3 [pid 6243] <... openat resumed>) = 3 [pid 6239] <... write resumed>) = 53248 [pid 6243] chdir("./file1" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6232, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6245] <... close resumed>) = 0 [pid 6239] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] close(4 [pid 6243] <... chdir resumed>) = 0 [pid 6239] <... futex resumed>) = 0 [pid 6243] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6245] <... close resumed>) = 0 [pid 6239] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] exit_group(0 [pid 6245] mkdir("./file1", 0777) = 0 [pid 6239] <... futex resumed>) = ? [pid 6235] <... exit_group resumed>) = ? [pid 6247] <... futex resumed>) = ? [pid 6245] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6239] +++ exited with 0 +++ [pid 6247] +++ exited with 0 +++ [pid 6243] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6235] +++ exited with 0 +++ [pid 5073] <... ioctl resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6243] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6243] <... futex resumed>) = 1 [pid 6240] <... futex resumed>) = 0 [pid 6243] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6240] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6240] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6243] creat("./file0", 000) = 4 [pid 5073] close(3) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6245] <... mount resumed>) = 0 [pid 6243] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6243] <... futex resumed>) = 1 [pid 6240] <... futex resumed>) = 0 [pid 6240] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6243] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6240] <... futex resumed>) = 0 [ 169.415292][ T6239] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.439091][ T6245] loop1: detected capacity change from 0 to 1024 [ 169.446793][ T6239] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6245] <... openat resumed>) = 3 [pid 6240] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] <... write resumed>) = 524288 [pid 6245] chdir("./file1" [pid 5075] newfstatat(3, "", [pid 5074] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6249 ./strace-static-x86_64: Process 6249 attached [pid 6249] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6249] chdir("./64") = 0 [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6249] setpgid(0, 0) = 0 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6249] write(3, "1000", 4) = 4 [pid 6249] close(3) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs" [pid 5074] newfstatat(3, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5074] getdents64(3, [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6249] <... symlink resumed>) = 0 [pid 6245] <... chdir resumed>) = 0 [pid 5075] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6245] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6245] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(AT_FDCWD, "./63/binderfs", [pid 5074] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] munmap(0x7eff79a00000, 138412032 [pid 6245] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6245] <... futex resumed>) = 1 [pid 5075] unlink("./63/binderfs" [pid 6249] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6248] <... munmap resumed>) = 0 [pid 6245] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6249] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6249] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6249] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6249] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6248] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./64/binderfs" [pid 6245] creat("./file0", 000 [pid 6249] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6249] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6245] <... creat resumed>) = 4 [pid 6249] <... clone3 resumed> => {parent_tid=[6250]}, 88) = 6250 ./strace-static-x86_64: Process 6250 attached [pid 6249] rt_sigprocmask(SIG_SETMASK, [], [pid 6245] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6245] <... futex resumed>) = 0 [pid 6241] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6248] <... openat resumed>) = 4 [pid 6245] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6240] <... futex resumed>) = 0 [pid 6250] <... rseq resumed>) = 0 [pid 6240] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6250] set_robust_list(0x7eff81ecd9a0, 24 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... mmap resumed>) = 0x7eff81e8c000 [pid 6245] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6241] <... futex resumed>) = 0 [pid 6250] <... set_robust_list resumed>) = 0 [pid 6240] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6241] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] rt_sigprocmask(SIG_SETMASK, [], [pid 6240] <... mprotect resumed>) = 0 [pid 6250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6240] rt_sigprocmask(SIG_BLOCK, ~[], [ 169.491111][ T6243] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.501826][ T6243] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.528017][ T6243] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6250] memfd_create("syzkaller", 0 [pid 6249] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 6240] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6250] <... memfd_create resumed>) = 3 [pid 6240] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6251 attached [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6249] <... futex resumed>) = 0 [pid 6251] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6250] <... mmap resumed>) = 0x7eff79a00000 [pid 6249] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6240] <... clone3 resumed> => {parent_tid=[6251]}, 88) = 6251 [pid 6251] <... rseq resumed>) = 0 [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6240] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6240] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] set_robust_list(0x7eff81eac9a0, 24 [pid 6240] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6251] <... set_robust_list resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 169.557093][ T6243] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.573723][ T6248] loop5: detected capacity change from 0 to 1024 [ 169.587145][ T6243] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6251] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6250] <... write resumed>) = 524288 [pid 6248] <... ioctl resumed>) = 0 [pid 6241] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6240] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6241] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] munmap(0x7eff79a00000, 138412032 [pid 6248] close(3 [pid 6241] <... futex resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./63/file1", [pid 6248] <... close resumed>) = 0 [pid 6250] <... munmap resumed>) = 0 [pid 6248] close(4 [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6248] <... close resumed>) = 0 [pid 6241] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] mkdir("./file1", 0777 [pid 6241] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 169.597409][ T28] audit: type=1800 audit(1708423247.215:387): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 169.599377][ T6245] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.630763][ T6243] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6250] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6248] <... mkdir resumed>) = 0 [pid 6243] <... write resumed>) = 53248 [pid 6241] <... mprotect resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = 0 [pid 6250] ioctl(4, LOOP_SET_FD, 3 [pid 6248] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6243] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] <... openat resumed>) = 4 [pid 5074] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6243] <... futex resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6243] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] getdents64(4, [pid 6241] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] newfstatat(AT_FDCWD, "./64/file1", [pid 6251] <... open resumed>) = 5 [pid 6241] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 6251] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] close(4 [pid 6240] exit_group(0 [pid 5074] <... openat resumed>) = 4 [pid 5075] <... close resumed>) = 0 [pid 6251] <... futex resumed>) = ? [pid 6240] <... exit_group resumed>) = ? [ 169.662783][ T6245] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.670487][ T6245] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.678394][ T6245] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.679902][ T6250] loop2: detected capacity change from 0 to 1024 [ 169.696099][ T6245] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6251] +++ exited with 0 +++ [pid 6243] <... futex resumed>) = ? [pid 5075] rmdir("./63/file1"./strace-static-x86_64: Process 6252 attached [pid 6248] <... mount resumed>) = 0 [pid 6243] +++ exited with 0 +++ [pid 6241] <... clone3 resumed> => {parent_tid=[6252]}, 88) = 6252 [pid 6240] +++ exited with 0 +++ [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6248] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6241] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6240, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5075] close(3 [pid 5074] getdents64(4, [pid 6241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6248] <... openat resumed>) = 3 [pid 6252] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6250] <... ioctl resumed>) = 0 [pid 6248] chdir("./file1" [pid 6241] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... restart_syscall resumed>) = 0 [pid 6241] <... futex resumed>) = 0 [pid 5075] rmdir("./63" [pid 6248] <... chdir resumed>) = 0 [pid 6250] close(3) = 0 [pid 6250] close(4) = 0 [pid 6250] mkdir("./file1", 0777 [pid 6252] <... rseq resumed>) = 0 [pid 6250] <... mkdir resumed>) = 0 [pid 6248] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6241] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5071] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./64", 0777 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6252] set_robust_list(0x7eff81eac9a0, 24 [pid 6248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... mkdir resumed>) = 0 [pid 5074] close(4 [pid 5071] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6252] <... set_robust_list resumed>) = 0 [pid 6248] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 6252] rt_sigprocmask(SIG_SETMASK, [], [pid 6248] <... futex resumed>) = 1 [pid 6246] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] rmdir("./64/file1" [pid 5071] <... openat resumed>) = 3 [pid 6252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6248] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6246] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... write resumed>) = 53248 [ 169.711054][ T6245] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6252] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6246] <... futex resumed>) = 0 [pid 6245] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5075] <... openat resumed>) = 3 [pid 6246] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... open resumed>) = 5 [pid 6250] <... mount resumed>) = 0 [pid 6248] creat("./file0", 000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6250] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6245] <... futex resumed>) = 0 [pid 6252] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... openat resumed>) = 3 [pid 6245] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] getdents64(3, [pid 6250] chdir("./file1" [pid 6248] <... creat resumed>) = 4 [pid 6252] <... futex resumed>) = 1 [pid 6250] <... chdir resumed>) = 0 [pid 6241] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6250] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6252] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6250] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6248] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] exit_group(0 [pid 5074] close(3 [pid 5071] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = 1 [pid 6246] <... futex resumed>) = 0 [pid 6252] <... futex resumed>) = ? [pid 6250] <... futex resumed>) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6248] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6246] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = ? [pid 6241] <... exit_group resumed>) = ? [pid 5074] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6246] <... futex resumed>) = 0 [pid 6245] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] <... futex resumed>) = 0 [pid 6248] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6246] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] rmdir("./64" [pid 5071] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6250] creat("./file0", 000 [pid 6249] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6241] +++ exited with 0 +++ [ 169.755507][ T28] audit: type=1800 audit(1708423247.375:388): pid=6252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6250] <... creat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./65", 0777 [pid 5071] unlink("./65/binderfs" [pid 6250] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5072] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] <... futex resumed>) = 1 [pid 5075] close(3 [pid 5071] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] <... futex resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6246] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6246] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6246] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6249] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6249] <... futex resumed>) = 1 [pid 6246] <... clone3 resumed> => {parent_tid=[6253]}, 88) = 6253 [pid 6246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6246] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6253 attached ) = 0 [pid 6253] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6246] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6253] <... rseq resumed>) = 0 [pid 6253] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6253] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 169.801548][ T6248] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.838640][ T6248] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6253] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6249] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6254 [pid 5072] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6254] chdir("./64") = 0 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6254] setpgid(0, 0) = 0 [pid 6246] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] unlink("./63/binderfs" [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] <... unlink resumed>) = 0 [pid 6254] write(3, "1000", 4 [pid 5072] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] <... write resumed>) = 4 [ 169.855118][ T28] audit: type=1800 audit(1708423247.465:389): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 169.890555][ T6250] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6254] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 6254] <... close resumed>) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6254] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6254] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6249] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6249] <... futex resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./65/file1", [pid 6254] <... clone3 resumed> => {parent_tid=[6255]}, 88) = 6255 [pid 6249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6255 attached NULL, 8) = 0 [pid 6249] <... mmap resumed>) = 0x7eff81e8c000 [pid 6255] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6254] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6249] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6255] <... rseq resumed>) = 0 [pid 6254] <... futex resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6255] set_robust_list(0x7eff81ecd9a0, 24 [pid 6254] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6249] <... mprotect resumed>) = 0 [pid 6255] <... set_robust_list resumed>) = 0 [pid 6255] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6255] memfd_create("syzkaller", 0) = 3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6249] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6249] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6249] <... clone3 resumed> => {parent_tid=[6256]}, 88) = 6256 [pid 5074] close(3 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6256 attached [pid 6249] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6249] <... futex resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6249] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6256] <... rseq resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6256] set_robust_list(0x7eff81eac9a0, 24 [pid 5072] newfstatat(AT_FDCWD, "./63/file1", [pid 5071] getdents64(4, [pid 6256] <... set_robust_list resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6256] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 169.905272][ T6250] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.915287][ T6250] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.930968][ T6248] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] getdents64(4, [pid 6256] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 169.969904][ T6248] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.982085][ T6250] hfsplus: request for non-existent node 16777216 in B*Tree [ 169.990842][ T28] audit: type=1800 audit(1708423247.605:390): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6257 [pid 5072] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6256] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(4 [pid 6257] chdir("./65") = 0 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] setpgid(0, 0) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6255] <... write resumed>) = 524288 [pid 6257] write(3, "1000", 4) = 4 [pid 6253] <... open resumed>) = 5 [pid 6257] close(3 [pid 6253] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... close resumed>) = 0 [pid 6253] <... futex resumed>) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 6253] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 6255] munmap(0x7eff79a00000, 138412032) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5071] rmdir("./65/file1" [pid 5072] newfstatat(4, "", [pid 6255] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] getdents64(4, [pid 5071] getdents64(3, [pid 6255] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 5071] close(3 [pid 5072] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 6257] <... symlink resumed>) = 0 [pid 6257] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] rmdir("./65" [pid 5072] close(4) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6256] <... open resumed>) = 5 [pid 5072] rmdir("./63/file1" [pid 5071] <... rmdir resumed>) = 0 [pid 6257] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6255] <... ioctl resumed>) = 0 [pid 6255] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] mkdir("./66", 0777 [pid 6255] <... close resumed>) = 0 [pid 6255] close(4) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6255] mkdir("./file1", 0777 [pid 6257] <... mmap resumed>) = 0x7eff81ead000 [pid 6255] <... mkdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] <... mkdir resumed>) = 0 [pid 6257] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6258 attached [pid 6258] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6257] <... clone3 resumed> => {parent_tid=[6258]}, 88) = 6258 [pid 6258] <... rseq resumed>) = 0 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] set_robust_list(0x7eff81ecd9a0, 24 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] <... set_robust_list resumed>) = 0 [pid 6257] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] <... futex resumed>) = 0 [pid 6258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] memfd_create("syzkaller", 0 [pid 6255] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6258] <... memfd_create resumed>) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 5072] close(3 [pid 5071] <... openat resumed>) = 3 [pid 6256] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6256] <... futex resumed>) = 0 [pid 6256] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] rmdir("./63") = 0 [pid 5072] mkdir("./64", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 170.014366][ T6248] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.016389][ T6250] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.021674][ T6248] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.044185][ T6255] loop4: detected capacity change from 0 to 1024 [ 170.050969][ T6250] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6250] <... write resumed>) = 53248 [pid 6250] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6249] exit_group(0) = ? [pid 6256] <... futex resumed>) = ? [pid 6256] +++ exited with 0 +++ [pid 6250] <... futex resumed>) = ? [pid 6255] <... mount resumed>) = 0 [pid 6250] +++ exited with 0 +++ [pid 6249] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6255] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6255] <... openat resumed>) = 3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6255] chdir("./file1" [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6255] <... chdir resumed>) = 0 [pid 5073] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6255] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6255] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6255] <... futex resumed>) = 1 [pid 6254] <... futex resumed>) = 0 [pid 5073] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] <... futex resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6255] creat("./file0", 000 [pid 6254] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6258] <... write resumed>) = 524288 [pid 6255] <... creat resumed>) = 4 [pid 5073] unlink("./64/binderfs") = 0 [pid 5073] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... ioctl resumed>) = 0 [pid 6255] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] close(3) = 0 [pid 6248] <... write resumed>) = 53248 [pid 6248] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] <... futex resumed>) = 0 [pid 6246] exit_group(0 [pid 6253] <... futex resumed>) = ? [pid 6246] <... exit_group resumed>) = ? [pid 6253] +++ exited with 0 +++ ./strace-static-x86_64: Process 6259 attached [pid 6248] +++ exited with 0 +++ [pid 6246] +++ exited with 0 +++ [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6259 [pid 6259] set_robust_list(0x5555571ca6a0, 24 [pid 6258] munmap(0x7eff79a00000, 138412032 [pid 5073] <... umount2 resumed>) = 0 [pid 6259] <... set_robust_list resumed>) = 0 [pid 6259] chdir("./66" [pid 6258] <... munmap resumed>) = 0 [pid 5072] close(3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6246, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5072] <... close resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... restart_syscall resumed>) = 0 [pid 5076] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] getdents64(3, [pid 5073] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6260 [pid 6258] <... openat resumed>) = 4 [pid 5076] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./64/file1", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5073] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6260 attached [pid 6258] ioctl(4, LOOP_SET_FD, 3 [ 170.177487][ T6255] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.203914][ T6258] loop3: detected capacity change from 0 to 1024 [pid 6254] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6260] set_robust_list(0x5555571ca6a0, 24 [pid 6259] <... chdir resumed>) = 0 [pid 6258] <... ioctl resumed>) = 0 [pid 6254] <... futex resumed>) = 0 [pid 5076] unlink("./64/binderfs" [pid 6260] <... set_robust_list resumed>) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6254] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... openat resumed>) = 4 [pid 6260] chdir("./64" [pid 6254] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6260] <... chdir resumed>) = 0 [pid 6259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6254] <... mprotect resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6259] <... prctl resumed>) = 0 [pid 6260] <... prctl resumed>) = 0 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6260] setpgid(0, 0 [pid 6259] setpgid(0, 0 [pid 6260] <... setpgid resumed>) = 0 [pid 5073] getdents64(4, [pid 6260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6254] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6260] <... openat resumed>) = 3 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6260] write(3, "1000", 4 [pid 5073] getdents64(4, [pid 6260] <... write resumed>) = 4 [pid 6259] <... setpgid resumed>) = 0 [pid 6254] <... clone3 resumed> => {parent_tid=[6261]}, 88) = 6261 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6261 attached [pid 6260] close(3 [pid 6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6254] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] close(4 [pid 6260] <... close resumed>) = 0 [pid 6254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... close resumed>) = 0 [pid 6261] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6260] symlink("/dev/binderfs", "./binderfs" [pid 6254] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] rmdir("./64/file1" [pid 6261] <... rseq resumed>) = 0 [pid 6260] <... symlink resumed>) = 0 [pid 6259] <... openat resumed>) = 3 [pid 6254] <... futex resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6254] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] set_robust_list(0x7eff81eac9a0, 24 [pid 6260] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] close(3 [pid 5073] getdents64(3, [pid 6260] <... futex resumed>) = 0 [pid 6258] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6261] <... set_robust_list resumed>) = 0 [pid 6260] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6259] write(3, "1000", 4 [pid 6258] close(4 [pid 5073] close(3 [pid 6260] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6259] <... write resumed>) = 4 [pid 6258] <... close resumed>) = 0 [pid 6260] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6258] mkdir("./file1", 0777 [pid 6259] close(3 [pid 5073] <... close resumed>) = 0 [pid 6260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] <... mkdir resumed>) = 0 [pid 5073] rmdir("./64" [pid 6261] rt_sigprocmask(SIG_SETMASK, [], [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6259] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] <... mmap resumed>) = 0x7eff81ead000 [pid 6261] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6260] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6259] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 6260] <... mprotect resumed>) = 0 [pid 6259] <... symlink resumed>) = 0 [pid 6258] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 170.222201][ T6255] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] mkdir("./65", 0777 [pid 6260] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 6260] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6259] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(AT_FDCWD, "./64/file1", [pid 6260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6259] <... futex resumed>) = 0 [pid 6258] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6259] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6259] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6258] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 6260] <... clone3 resumed> => {parent_tid=[6262]}, 88) = 6262 [pid 6259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6258] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6262 attached [pid 6260] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] chdir("./file1" [pid 6262] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6259] <... mmap resumed>) = 0x7eff81ead000 [pid 6258] <... chdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6262] <... rseq resumed>) = 0 [pid 6260] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6262] set_robust_list(0x7eff81ecd9a0, 24 [pid 6259] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6258] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(4, "", [pid 6262] <... set_robust_list resumed>) = 0 [pid 6260] <... futex resumed>) = 0 [pid 6259] <... mprotect resumed>) = 0 [pid 6258] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6262] rt_sigprocmask(SIG_SETMASK, [], [pid 6260] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6258] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] <... futex resumed>) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6262] memfd_create("syzkaller", 0 [pid 6258] creat("./file0", 000 [pid 6257] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6258] <... creat resumed>) = 4 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6262] <... memfd_create resumed>) = 3 [pid 6259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6258] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6259] <... clone3 resumed> => {parent_tid=[6263]}, 88) = 6263 [pid 6259] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] close(4 [pid 6262] <... mmap resumed>) = 0x7eff79a00000 [pid 6259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6263 attached [pid 6259] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./64/file1" [pid 6263] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6259] <... futex resumed>) = 0 [pid 6259] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6263] <... rseq resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6263] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 170.264108][ T6255] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.286399][ T6255] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6263] memfd_create("syzkaller", 0 [pid 5076] getdents64(3, [pid 6263] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6261] <... open resumed>) = 5 [pid 6261] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6261] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] close(3 [pid 6263] <... mmap resumed>) = 0x7eff79a00000 [pid 6257] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6262] <... write resumed>) = 524288 [pid 6257] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] rmdir("./64" [pid 5073] <... ioctl resumed>) = 0 [pid 6257] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] mkdir("./65", 0777 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6257] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6264 attached [pid 6262] munmap(0x7eff79a00000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 6264] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6262] <... munmap resumed>) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[6264]}, 88) = 6264 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6265 attached [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6265 [ 170.322206][ T6258] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.329530][ T6258] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.356596][ T6255] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6257] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 6265] set_robust_list(0x5555571ca6a0, 24 [pid 6264] <... rseq resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6265] <... set_robust_list resumed>) = 0 [pid 6265] chdir("./65" [pid 6264] set_robust_list(0x7eff81eac9a0, 24 [pid 6263] <... write resumed>) = 524288 [pid 6262] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6257] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] <... write resumed>) = 53248 [pid 6265] <... chdir resumed>) = 0 [pid 6264] <... set_robust_list resumed>) = 0 [pid 6263] munmap(0x7eff79a00000, 138412032 [pid 6255] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6255] <... futex resumed>) = 0 [pid 6264] rt_sigprocmask(SIG_SETMASK, [], [pid 6265] <... prctl resumed>) = 0 [pid 6264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6255] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] exit_group(0 [pid 6265] setpgid(0, 0 [pid 6264] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6265] <... setpgid resumed>) = 0 [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6265] write(3, "1000", 4 [pid 6261] <... futex resumed>) = ? [pid 6255] <... futex resumed>) = ? [pid 6254] <... exit_group resumed>) = ? [pid 6265] <... write resumed>) = 4 [pid 6263] <... munmap resumed>) = 0 [pid 6261] +++ exited with 0 +++ [pid 6255] +++ exited with 0 +++ [pid 6265] close(3) = 0 [pid 6265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6265] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6265] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6264] <... open resumed>) = 5 [pid 6263] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6262] <... openat resumed>) = 4 [pid 6254] +++ exited with 0 +++ [pid 6264] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [ 170.378908][ T6255] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.392747][ T6258] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.400071][ T6258] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6263] <... openat resumed>) = 4 [pid 6262] ioctl(4, LOOP_SET_FD, 3 [pid 6264] <... futex resumed>) = 1 [pid 6263] ioctl(4, LOOP_SET_FD, 3 [pid 6257] <... futex resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6265] <... mmap resumed>) = 0x7eff81ead000 [pid 6264] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6265] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] unlink("./64/binderfs" [pid 6265] <... mprotect resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6265] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6262] <... ioctl resumed>) = 0 [pid 6265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6262] close(3) = 0 ./strace-static-x86_64: Process 6266 attached [pid 6265] <... clone3 resumed> => {parent_tid=[6266]}, 88) = 6266 [pid 6262] close(4 [pid 6266] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], [pid 6262] <... close resumed>) = 0 [pid 6266] <... rseq resumed>) = 0 [pid 6265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6263] <... ioctl resumed>) = 0 [pid 6262] mkdir("./file1", 0777 [pid 6266] set_robust_list(0x7eff81ecd9a0, 24 [pid 6265] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] close(3 [pid 6262] <... mkdir resumed>) = 0 [pid 6266] <... set_robust_list resumed>) = 0 [pid 6265] <... futex resumed>) = 0 [pid 6263] <... close resumed>) = 0 [pid 6266] rt_sigprocmask(SIG_SETMASK, [], [pid 6265] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6263] close(4 [pid 6266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6263] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6263] mkdir("./file1", 0777 [pid 6262] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] close(3 [pid 6266] memfd_create("syzkaller", 0 [pid 6263] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6266] <... memfd_create resumed>) = 3 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./64/file1", ./strace-static-x86_64: Process 6267 attached [pid 6266] <... mmap resumed>) = 0x7eff79a00000 [pid 6263] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6258] <... write resumed>) = 53248 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6267] set_robust_list(0x5555571ca6a0, 24 [pid 6258] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6267 [pid 5075] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] <... set_robust_list resumed>) = 0 [pid 6266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6263] <... mount resumed>) = 0 [pid 6262] <... mount resumed>) = 0 [pid 6258] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6267] chdir("./65" [pid 6263] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 170.430413][ T6262] loop1: detected capacity change from 0 to 1024 [ 170.436975][ T6258] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.437881][ T6263] loop0: detected capacity change from 0 to 1024 [ 170.448645][ T6258] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6258] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] exit_group(0 [pid 6267] <... chdir resumed>) = 0 [pid 6264] <... futex resumed>) = ? [pid 6263] <... openat resumed>) = 3 [pid 6257] <... exit_group resumed>) = ? [pid 5075] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6264] +++ exited with 0 +++ [pid 6262] <... openat resumed>) = 3 [pid 6258] <... futex resumed>) = ? [pid 6267] <... prctl resumed>) = 0 [pid 6263] chdir("./file1" [pid 6262] chdir("./file1" [pid 5075] <... openat resumed>) = 4 [pid 6267] setpgid(0, 0 [pid 6263] <... chdir resumed>) = 0 [pid 6262] <... chdir resumed>) = 0 [pid 6267] <... setpgid resumed>) = 0 [pid 6263] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] newfstatat(4, "", [pid 6267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6263] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(4, [pid 6263] <... futex resumed>) = 1 [pid 6263] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6262] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6267] <... openat resumed>) = 3 [pid 6259] <... futex resumed>) = 0 [pid 6262] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6262] <... futex resumed>) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6262] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6260] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6260] <... futex resumed>) = 0 [pid 6259] <... futex resumed>) = 1 [pid 6263] creat("./file0", 000 [pid 6262] creat("./file0", 000 [pid 6260] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(4, [pid 6267] write(3, "1000", 4 [pid 6266] <... write resumed>) = 524288 [pid 6263] <... creat resumed>) = 4 [pid 6262] <... creat resumed>) = 4 [pid 6258] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6267] <... write resumed>) = 4 [pid 6263] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6262] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6262] <... futex resumed>) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6259] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... futex resumed>) = 0 [pid 6260] <... futex resumed>) = 0 [pid 6259] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6263] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6262] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6267] close(3 [pid 6266] munmap(0x7eff79a00000, 138412032 [pid 5075] close(4 [pid 6267] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6267] symlink("/dev/binderfs", "./binderfs" [pid 6266] <... munmap resumed>) = 0 [pid 5075] rmdir("./64/file1" [pid 5074] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] <... symlink resumed>) = 0 [pid 6266] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6267] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6267] <... futex resumed>) = 0 [pid 6266] ioctl(4, LOOP_SET_FD, 3 [pid 5074] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6267] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5075] getdents64(3, [pid 5074] <... openat resumed>) = 3 [pid 6260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6260] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6259] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6267] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5074] newfstatat(3, "", [pid 6260] <... futex resumed>) = 0 [pid 6259] <... futex resumed>) = 0 [pid 6260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6260] <... mmap resumed>) = 0x7eff81e8c000 [pid 6259] <... mmap resumed>) = 0x7eff81e8c000 [pid 6267] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5075] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 6267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6260] <... mprotect resumed>) = 0 [pid 5075] rmdir("./64" [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6267] <... mmap resumed>) = 0x7eff81ead000 [pid 6260] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6259] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6267] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6259] <... mprotect resumed>) = 0 [pid 6259] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6260] <... clone3 resumed> => {parent_tid=[6268]}, 88) = 6268 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], [pid 6267] <... mprotect resumed>) = 0 [pid 6259] <... clone3 resumed> => {parent_tid=[6269]}, 88) = 6269 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6259] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] mkdir("./65", 0777 [pid 6260] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] <... futex resumed>) = 0 [pid 6259] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6269 attached ./strace-static-x86_64: Process 6268 attached [pid 6260] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... futex resumed>) = 0 [pid 6269] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6268] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6259] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6269] <... rseq resumed>) = 0 [pid 6268] <... rseq resumed>) = 0 [pid 6269] set_robust_list(0x7eff81eac9a0, 24 [ 170.559509][ T6263] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.569434][ T6262] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.579687][ T6262] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.579733][ T6266] loop2: detected capacity change from 0 to 1024 [ 170.588567][ T6263] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6268] set_robust_list(0x7eff81eac9a0, 24 [pid 6269] <... set_robust_list resumed>) = 0 [pid 6268] <... set_robust_list resumed>) = 0 [pid 6269] rt_sigprocmask(SIG_SETMASK, [], [pid 6268] rt_sigprocmask(SIG_SETMASK, [], [pid 6269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6267] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6269] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6267] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6268] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5075] <... openat resumed>) = 3 [pid 5074] unlink("./65/binderfs" [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 6267] <... clone3 resumed> => {parent_tid=[6270]}, 88) = 6270 [pid 6267] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6270 attached [pid 6267] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6267] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6270] <... rseq resumed>) = 0 [ 170.617265][ T6262] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.653870][ T6263] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6270] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6266] <... ioctl resumed>) = 0 [pid 6260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6266] close(3 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 6266] <... close resumed>) = 0 [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6266] close(4) = 0 [pid 6270] memfd_create("syzkaller", 0 [pid 6266] mkdir("./file1", 0777 [pid 5074] <... umount2 resumed>) = 0 [pid 6270] <... memfd_create resumed>) = 3 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6266] <... mkdir resumed>) = 0 [pid 6270] <... mmap resumed>) = 0x7eff79a00000 [pid 6266] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] <... ioctl resumed>) = 0 [pid 5074] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6266] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6266] <... openat resumed>) = 3 [pid 6268] <... open resumed>) = 5 [pid 5074] newfstatat(4, "", [pid 6268] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6266] chdir("./file1" [pid 6268] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... chdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6269] <... open resumed>) = 5 [pid 5074] close(4 [pid 6269] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 6269] <... futex resumed>) = 0 [ 170.661934][ T6262] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.683938][ T6263] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] rmdir("./65/file1" [pid 6269] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./65") = 0 [pid 5074] mkdir("./66", 0777 [pid 5075] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6266] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6270] <... write resumed>) = 524288 [pid 6266] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6263] <... write resumed>) = 53248 [pid 6266] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6263] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] creat("./file0", 000 [pid 6259] exit_group(0 [pid 6269] <... futex resumed>) = ? [pid 6265] <... futex resumed>) = 0 [pid 6263] <... futex resumed>) = ? [pid 6259] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6271 attached [pid 6270] munmap(0x7eff79a00000, 138412032 [pid 6269] +++ exited with 0 +++ [pid 6266] <... creat resumed>) = 4 [pid 6265] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6271 [pid 6271] set_robust_list(0x5555571ca6a0, 24 [pid 6270] <... munmap resumed>) = 0 [pid 6266] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] +++ exited with 0 +++ [pid 6259] +++ exited with 0 +++ [pid 6262] <... write resumed>) = 53248 [pid 6271] <... set_robust_list resumed>) = 0 [pid 6266] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6262] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6265] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6262] <... futex resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6271] chdir("./65" [pid 6265] <... futex resumed>) = 0 [pid 6262] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] <... restart_syscall resumed>) = 0 [pid 6265] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] exit_group(0 [pid 6268] <... futex resumed>) = ? [ 170.713513][ T6263] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.720845][ T6263] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.731452][ T6262] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.746006][ T6262] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6262] <... futex resumed>) = ? [pid 6260] <... exit_group resumed>) = ? [pid 6270] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6268] +++ exited with 0 +++ [pid 6266] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6262] +++ exited with 0 +++ [pid 5071] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6270] <... openat resumed>) = 4 [pid 6260] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 5071] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6260, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5071] <... openat resumed>) = 3 [pid 5072] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] newfstatat(3, "", [pid 5071] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./66/binderfs", [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./66/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5071] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... chdir resumed>) = 0 [pid 6270] <... ioctl resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6270] close(3 [pid 6271] <... prctl resumed>) = 0 [pid 6270] <... close resumed>) = 0 [pid 6270] close(4 [pid 5072] unlink("./64/binderfs" [pid 6271] setpgid(0, 0 [pid 6270] <... close resumed>) = 0 [pid 5072] <... unlink resumed>) = 0 [ 170.784216][ T6270] loop5: detected capacity change from 0 to 1024 [ 170.810595][ T6266] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... setpgid resumed>) = 0 [pid 6270] mkdir("./file1", 0777 [pid 6265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6270] <... mkdir resumed>) = 0 [pid 6265] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... umount2 resumed>) = 0 [pid 5071] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6272 [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6272 attached [pid 6271] <... openat resumed>) = 3 [pid 6270] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6265] <... futex resumed>) = 0 [pid 5071] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./66/file1" [pid 6265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6272] set_robust_list(0x5555571ca6a0, 24 [pid 6265] <... mmap resumed>) = 0x7eff81e8c000 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 6265] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6272] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6271] write(3, "1000", 4 [pid 6272] chdir("./66" [pid 6271] <... write resumed>) = 4 [pid 5071] rmdir("./66" [pid 6272] <... chdir resumed>) = 0 [pid 6271] close(3 [pid 6265] <... mprotect resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6271] <... close resumed>) = 0 [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6271] symlink("/dev/binderfs", "./binderfs" [pid 6265] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] mkdir("./67", 0777 [pid 6272] <... prctl resumed>) = 0 [pid 6271] <... symlink resumed>) = 0 [pid 6270] <... mount resumed>) = 0 [pid 6265] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6270] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6270] chdir("./file1") = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6270] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... openat resumed>) = 3 [pid 6270] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6271] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [ 170.829962][ T6266] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.840134][ T6266] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.848878][ T6266] hfsplus: request for non-existent node 16777216 in B*Tree [ 170.869428][ T6266] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6270] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] setpgid(0, 0 [pid 6265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 1 [pid 6267] <... futex resumed>) = 0 [pid 6270] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6273 attached [pid 6272] <... setpgid resumed>) = 0 [pid 6271] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6267] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] <... write resumed>) = 53248 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6273] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6271] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6267] <... futex resumed>) = 1 [pid 6266] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] <... clone3 resumed> => {parent_tid=[6273]}, 88) = 6273 [pid 5072] newfstatat(AT_FDCWD, "./64/file1", [pid 6273] <... rseq resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6270] creat("./file0", 000 [pid 6267] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6266] <... futex resumed>) = 0 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], [pid 6273] set_robust_list(0x7eff81eac9a0, 24 [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] <... creat resumed>) = 4 [pid 6266] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6265] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 170.879191][ T6266] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6273] <... set_robust_list resumed>) = 0 [pid 6272] <... openat resumed>) = 3 [pid 6271] <... mmap resumed>) = 0x7eff81ead000 [pid 6265] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... ioctl resumed>) = 0 [pid 6272] write(3, "1000", 4 [pid 6271] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5072] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] <... write resumed>) = 4 [pid 6273] rt_sigprocmask(SIG_SETMASK, [], [pid 6271] <... mprotect resumed>) = 0 [pid 6270] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] close(3 [pid 5072] <... openat resumed>) = 4 [pid 6270] <... futex resumed>) = 1 [pid 6267] <... futex resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6267] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] newfstatat(4, "", [pid 6272] <... close resumed>) = 0 [pid 6271] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6274 attached [pid 6273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6272] <... symlink resumed>) = 0 [pid 6270] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6267] <... futex resumed>) = 0 [pid 5072] getdents64(4, [pid 6274] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6272] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... clone3 resumed> => {parent_tid=[6274]}, 88) = 6274 [pid 6274] <... rseq resumed>) = 0 [pid 6272] <... futex resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6274] set_robust_list(0x7eff81ecd9a0, 24 [pid 6272] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] getdents64(4, [pid 6274] <... set_robust_list resumed>) = 0 [pid 6272] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6271] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6272] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6271] <... futex resumed>) = 0 [pid 6274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6271] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] close(4 [pid 6272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 6274] memfd_create("syzkaller", 0 [pid 6273] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6272] <... mmap resumed>) = 0x7eff81ead000 [pid 6267] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] rmdir("./64/file1" [pid 5071] close(3 [pid 6274] <... memfd_create resumed>) = 3 [pid 6272] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6273] <... open resumed>) = 5 [pid 6274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6272] <... mprotect resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6274] <... mmap resumed>) = 0x7eff79a00000 [pid 6272] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] getdents64(3, [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6275 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6272] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5072] close(3) = 0 ./strace-static-x86_64: Process 6275 attached [pid 6273] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6275] set_robust_list(0x5555571ca6a0, 24 [pid 6273] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6275] <... set_robust_list resumed>) = 0 [pid 6273] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] exit_group(0) = ? [pid 6275] chdir("./67" [pid 6273] <... futex resumed>) = ? [pid 6266] <... futex resumed>) = ? [pid 6275] <... chdir resumed>) = 0 [pid 6274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6273] +++ exited with 0 +++ [pid 6272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6266] +++ exited with 0 +++ [pid 6265] +++ exited with 0 +++ [pid 5072] rmdir("./64" [pid 6275] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [ 170.935021][ T6270] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6275] <... prctl resumed>) = 0 [pid 6272] <... clone3 resumed> => {parent_tid=[6276]}, 88) = 6276 [pid 6275] setpgid(0, 0 [pid 6272] rt_sigprocmask(SIG_SETMASK, [], [pid 6275] <... setpgid resumed>) = 0 [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6275] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6276 attached [pid 6275] <... openat resumed>) = 3 [pid 6272] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6275] write(3, "1000", 4 [pid 5073] <... openat resumed>) = 3 [pid 6276] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6275] <... write resumed>) = 4 [pid 5073] newfstatat(3, "", [pid 6275] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6276] <... rseq resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6272] <... futex resumed>) = 0 [pid 5073] getdents64(3, [pid 6276] set_robust_list(0x7eff81ecd9a0, 24 [pid 6275] symlink("/dev/binderfs", "./binderfs" [pid 5072] mkdir("./65", 0777 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6276] <... set_robust_list resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6276] rt_sigprocmask(SIG_SETMASK, [], [pid 6275] <... symlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] unlink("./65/binderfs" [pid 6276] memfd_create("syzkaller", 0 [pid 5073] <... unlink resumed>) = 0 [pid 6276] <... memfd_create resumed>) = 3 [pid 5073] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6275] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] <... mmap resumed>) = 0x7eff79a00000 [pid 6275] <... futex resumed>) = 0 [pid 6275] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6272] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6275] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6275] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5072] <... openat resumed>) = 3 [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6275] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6267] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6275] <... mprotect resumed>) = 0 [pid 6267] <... futex resumed>) = 0 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6267] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6275] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6274] <... write resumed>) = 524288 [pid 6267] <... mmap resumed>) = 0x7eff81e8c000 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6267] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6274] munmap(0x7eff79a00000, 138412032 [pid 6267] <... mprotect resumed>) = 0 [pid 6267] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6275] <... clone3 resumed> => {parent_tid=[6277]}, 88) = 6277 [pid 6267] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6274] <... munmap resumed>) = 0 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], [pid 6267] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... clone3 resumed> => {parent_tid=[6278]}, 88) = 6278 [pid 6275] <... futex resumed>) = 0 [pid 6267] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6278 attached [pid 6275] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6277 attached [pid 6274] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6267] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = 0 [pid 6278] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6267] <... futex resumed>) = 0 [pid 6278] <... rseq resumed>) = 0 [ 170.975708][ T6270] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.012481][ T6270] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6277] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6274] <... openat resumed>) = 4 [pid 6267] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6277] <... rseq resumed>) = 0 [pid 6274] ioctl(4, LOOP_SET_FD, 3 [pid 6277] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6278] set_robust_list(0x7eff81eac9a0, 24 [pid 6277] memfd_create("syzkaller", 0 [pid 6276] <... write resumed>) = 524288 [pid 5073] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] munmap(0x7eff79a00000, 138412032 [pid 6278] <... set_robust_list resumed>) = 0 [pid 6278] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6278] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6276] <... munmap resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] <... memfd_create resumed>) = 3 [pid 6276] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] newfstatat(AT_FDCWD, "./65/file1", [pid 5072] <... ioctl resumed>) = 0 [pid 6276] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6277] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] <... mmap resumed>) = 0x7eff79a00000 [ 171.034471][ T6270] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.034913][ T6274] loop4: detected capacity change from 0 to 1024 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6276] ioctl(4, LOOP_SET_FD, 3 [pid 6274] <... ioctl resumed>) = 0 [pid 6267] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6274] close(3 [pid 5073] <... openat resumed>) = 4 [pid 6274] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6279 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, ./strace-static-x86_64: Process 6279 attached [pid 6279] set_robust_list(0x5555571ca6a0, 24 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6279] <... set_robust_list resumed>) = 0 [pid 6274] close(4 [pid 5073] getdents64(4, [pid 6279] chdir("./65" [pid 6274] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6274] mkdir("./file1", 0777 [pid 5073] close(4) = 0 [pid 6279] <... chdir resumed>) = 0 [pid 6274] <... mkdir resumed>) = 0 [pid 5073] rmdir("./65/file1" [pid 6279] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 6276] <... ioctl resumed>) = 0 [pid 6274] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6279] <... prctl resumed>) = 0 [pid 6276] close(3 [pid 5073] close(3 [pid 6276] <... close resumed>) = 0 [pid 6279] setpgid(0, 0 [pid 6276] close(4 [pid 6279] <... setpgid resumed>) = 0 [pid 6279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./65" [pid 6279] <... openat resumed>) = 3 [pid 6278] <... open resumed>) = 5 [pid 6278] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6278] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... rmdir resumed>) = 0 [pid 6276] <... close resumed>) = 0 [pid 6279] write(3, "1000", 4 [pid 6276] mkdir("./file1", 0777 [pid 6270] <... write resumed>) = 53248 [pid 6279] <... write resumed>) = 4 [pid 6270] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6279] close(3) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6279] symlink("/dev/binderfs", "./binderfs" [pid 6270] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6279] <... symlink resumed>) = 0 [pid 6276] <... mkdir resumed>) = 0 [pid 6267] exit_group(0 [pid 6279] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6278] <... futex resumed>) = ? [pid 6277] <... write resumed>) = 524288 [pid 6270] <... futex resumed>) = ? [pid 6267] <... exit_group resumed>) = ? [ 171.086036][ T6270] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.095666][ T6276] loop3: detected capacity change from 0 to 1024 [ 171.120447][ T6270] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6279] <... futex resumed>) = 0 [pid 6278] +++ exited with 0 +++ [pid 6276] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6270] +++ exited with 0 +++ [pid 6267] +++ exited with 0 +++ [pid 5073] mkdir("./66", 0777 [pid 6279] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6277] munmap(0x7eff79a00000, 138412032 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6267, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6279] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6279] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5073] <... mkdir resumed>) = 0 [pid 6279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6277] <... munmap resumed>) = 0 [pid 6279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6279] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6279] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6277] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6277] <... openat resumed>) = 4 [pid 6277] ioctl(4, LOOP_SET_FD, 3 [pid 6279] <... clone3 resumed> => {parent_tid=[6280]}, 88) = 6280 [pid 6276] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6280 attached [pid 6279] rt_sigprocmask(SIG_SETMASK, [], [pid 6276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 6280] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6276] <... openat resumed>) = 3 [pid 6274] <... mount resumed>) = 0 [pid 5076] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6280] <... rseq resumed>) = 0 [pid 6279] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] chdir("./file1" [pid 6280] set_robust_list(0x7eff81ecd9a0, 24 [pid 6279] <... futex resumed>) = 0 [pid 6276] <... chdir resumed>) = 0 [pid 6274] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] <... set_robust_list resumed>) = 0 [pid 6279] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6276] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6280] rt_sigprocmask(SIG_SETMASK, [], [pid 6274] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6280] memfd_create("syzkaller", 0 [pid 6276] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6274] chdir("./file1" [pid 5076] <... openat resumed>) = 3 [pid 6280] <... memfd_create resumed>) = 3 [pid 6277] <... ioctl resumed>) = 0 [pid 6274] <... chdir resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 6280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6277] close(3 [pid 6274] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6280] <... mmap resumed>) = 0x7eff79a00000 [pid 6277] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6276] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6274] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6277] close(4 [pid 6276] <... futex resumed>) = 1 [pid 6272] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 6277] <... close resumed>) = 0 [pid 6272] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6277] mkdir("./file1", 0777 [pid 6272] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6277] <... mkdir resumed>) = 0 [pid 6276] creat("./file0", 000 [pid 6274] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... creat resumed>) = 4 [pid 6274] <... futex resumed>) = 1 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6276] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6274] creat("./file0", 000 [pid 6271] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6276] <... futex resumed>) = 1 [pid 6276] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6274] <... creat resumed>) = 4 [pid 6272] <... futex resumed>) = 0 [pid 6271] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 171.184735][ T6277] loop0: detected capacity change from 0 to 1024 [pid 6272] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./65/binderfs" [pid 6276] <... futex resumed>) = 0 [pid 6272] <... futex resumed>) = 1 [pid 6276] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6272] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... unlink resumed>) = 0 [pid 6274] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6274] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5073] <... ioctl resumed>) = 0 [pid 6277] <... mount resumed>) = 0 [pid 5076] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6277] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6277] chdir("./file1" [pid 5073] close(3 [pid 6277] <... chdir resumed>) = 0 [pid 6280] <... write resumed>) = 524288 [pid 6277] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... close resumed>) = 0 [pid 6272] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6277] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 171.230192][ T6276] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.256086][ T6274] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6277] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6277] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6275] <... futex resumed>) = 0 [pid 6275] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6277] <... futex resumed>) = 0 [pid 6275] <... futex resumed>) = 1 [pid 6277] creat("./file0", 000 [pid 6275] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] munmap(0x7eff79a00000, 138412032 [pid 6277] <... creat resumed>) = 4 [pid 6280] <... munmap resumed>) = 0 [pid 6277] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 6280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6277] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6275] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] <... openat resumed>) = 4 [pid 6275] <... futex resumed>) = 0 [pid 6271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6275] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6271] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6272] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6281 attached [pid 6280] ioctl(4, LOOP_SET_FD, 3 [pid 6272] <... futex resumed>) = 0 [pid 6271] <... mmap resumed>) = 0x7eff81e8c000 [pid 6272] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6271] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6281 [pid 6272] <... mmap resumed>) = 0x7eff81e8c000 [pid 6271] <... mprotect resumed>) = 0 [pid 6272] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6281] set_robust_list(0x5555571ca6a0, 24 [pid 6272] <... mprotect resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6272] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 171.292386][ T6276] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.298449][ T6277] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.300132][ T6276] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.307620][ T6274] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.323242][ T6280] loop1: detected capacity change from 0 to 1024 [pid 6272] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6271] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6282 attached [pid 6281] <... set_robust_list resumed>) = 0 [pid 6275] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... umount2 resumed>) = 0 [pid 6282] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6282] set_robust_list(0x7eff81eac9a0, 24 [pid 6275] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6282] <... set_robust_list resumed>) = 0 [pid 6282] rt_sigprocmask(SIG_SETMASK, [], [pid 6281] chdir("./66" [pid 6275] <... futex resumed>) = 0 [pid 6271] <... clone3 resumed> => {parent_tid=[6283]}, 88) = 6283 [pid 6282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6282] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6275] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6283 attached [pid 6272] <... clone3 resumed> => {parent_tid=[6282]}, 88) = 6282 [pid 6283] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] <... mmap resumed>) = 0x7eff81e8c000 [pid 6283] <... rseq resumed>) = 0 [pid 6271] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6275] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6272] rt_sigprocmask(SIG_SETMASK, [], [pid 6271] <... futex resumed>) = 0 [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6275] <... mprotect resumed>) = 0 [pid 6272] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6283] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6282] <... futex resumed>) = 0 [pid 6275] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6272] <... futex resumed>) = 1 [pid 6282] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6272] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6283] rt_sigprocmask(SIG_SETMASK, [], [pid 6282] <... open resumed>) = 5 [pid 6281] <... chdir resumed>) = 0 [pid 6280] <... ioctl resumed>) = 0 [pid 6275] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6282] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6272] <... futex resumed>) = 0 [pid 6282] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6280] close(3 [pid 6275] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./65/file1", [pid 6283] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6281] <... prctl resumed>) = 0 [pid 6280] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6280] close(4 [pid 6281] setpgid(0, 0 [pid 6280] <... close resumed>) = 0 [pid 6275] <... clone3 resumed> => {parent_tid=[6284]}, 88) = 6284 ./strace-static-x86_64: Process 6284 attached [pid 6284] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6280] mkdir("./file1", 0777 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], [pid 6284] <... rseq resumed>) = 0 [pid 6284] set_robust_list(0x7eff81eac9a0, 24) = 0 [ 171.342504][ T6276] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.361864][ T6276] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.370418][ T6274] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.371852][ T6276] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.382701][ T6277] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 6281] <... setpgid resumed>) = 0 [pid 6280] <... mkdir resumed>) = 0 [pid 6276] <... write resumed>) = 53248 [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6275] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6275] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6284] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6280] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6276] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] exit_group(0 [pid 6282] <... futex resumed>) = ? [pid 6281] <... openat resumed>) = 3 [pid 6276] <... futex resumed>) = ? [pid 6272] <... exit_group resumed>) = ? [pid 5076] <... openat resumed>) = 4 [pid 6282] +++ exited with 0 +++ [pid 5076] newfstatat(4, "", [pid 6281] write(3, "1000", 4) = 4 [pid 6276] +++ exited with 0 +++ [pid 6272] +++ exited with 0 +++ [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6281] close(3 [pid 5076] getdents64(4, [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6272, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6281] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 6283] <... open resumed>) = 5 [pid 6283] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6283] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] <... open resumed>) = 5 [pid 5074] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6284] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6275] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6284] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [ 171.401646][ T6274] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.434347][ T6277] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.441669][ T6277] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] getdents64(4, [pid 6281] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... futex resumed>) = 0 [pid 6280] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6280] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5076] rmdir("./65/file1" [pid 6281] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6280] chdir("./file1" [pid 5074] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6281] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6280] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6281] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] close(3 [pid 5074] unlink("./66/binderfs" [pid 6281] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6280] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6281] <... mprotect resumed>) = 0 [pid 6280] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] rmdir("./65" [pid 5074] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6280] <... futex resumed>) = 1 [pid 6279] <... futex resumed>) = 0 [pid 6279] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6279] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6280] creat("./file0", 000 [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./66", 0777 [pid 6280] <... creat resumed>) = 4 [pid 6280] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6280] <... futex resumed>) = 1 [pid 6279] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6280] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6279] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6280] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6279] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6285 attached [pid 6280] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6279] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6277] <... write resumed>) = 53248 [pid 6274] <... write resumed>) = 53248 [pid 5076] <... openat resumed>) = 3 [pid 6285] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6281] <... clone3 resumed> => {parent_tid=[6285]}, 88) = 6285 [pid 6277] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6274] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] exit_group(0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6285] <... rseq resumed>) = 0 [pid 6283] <... futex resumed>) = ? [pid 6281] rt_sigprocmask(SIG_SETMASK, [], [pid 6277] <... futex resumed>) = 0 [pid 6274] <... futex resumed>) = ? [pid 6271] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 6285] set_robust_list(0x7eff81ecd9a0, 24 [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6281] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... set_robust_list resumed>) = 0 [pid 6281] <... futex resumed>) = 0 [ 171.455175][ T6274] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.467359][ T6277] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.477829][ T6274] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.481459][ T6277] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6285] rt_sigprocmask(SIG_SETMASK, [], [pid 6281] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6275] exit_group(0 [pid 6274] +++ exited with 0 +++ [pid 6285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6277] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6285] memfd_create("syzkaller", 0 [pid 6275] <... exit_group resumed>) = ? [pid 6284] <... futex resumed>) = ? [pid 6277] <... futex resumed>) = ? [pid 6284] +++ exited with 0 +++ [pid 6277] +++ exited with 0 +++ [pid 6285] <... memfd_create resumed>) = 3 [pid 6283] +++ exited with 0 +++ [pid 6275] +++ exited with 0 +++ [pid 6271] +++ exited with 0 +++ [pid 5074] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6275, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6285] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [ 171.520017][ T6280] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.534424][ T6280] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.542324][ T6280] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.552208][ T6280] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6279] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6279] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6279] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6279] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./66/file1", [pid 6279] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] newfstatat(3, "", [pid 6279] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6279] <... mprotect resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, [pid 6279] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6285] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6279] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(4, "", [pid 6279] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./65/binderfs", [pid 5071] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6286 attached [pid 6285] <... write resumed>) = 524288 [pid 6279] <... clone3 resumed> => {parent_tid=[6286]}, 88) = 6286 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] getdents64(4, [pid 5071] newfstatat(3, "", [pid 6286] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6280] <... write resumed>) = 53248 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6280] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(4, [pid 5071] getdents64(3, [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6280] <... futex resumed>) = 0 [pid 5074] close(4 [pid 6286] <... rseq resumed>) = 0 [pid 6280] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6279] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] unlink("./65/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] rmdir("./66/file1" [pid 5071] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] set_robust_list(0x7eff81eac9a0, 24 [pid 6279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... set_robust_list resumed>) = 0 [pid 6279] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6286] rt_sigprocmask(SIG_SETMASK, [], [pid 6285] munmap(0x7eff79a00000, 138412032 [pid 6279] <... futex resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6285] <... munmap resumed>) = 0 [pid 5074] close(3 [pid 5071] unlink("./67/binderfs" [pid 6286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6286] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] rmdir("./66") = 0 [ 171.566014][ T6280] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.581261][ T6280] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5074] mkdir("./67", 0777 [pid 6285] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6287 attached [pid 6286] <... open resumed>) = 5 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6287 [pid 5074] <... mkdir resumed>) = 0 [pid 6287] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6286] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6287] chdir("./66" [pid 6286] <... futex resumed>) = 1 [pid 6279] <... futex resumed>) = 0 [pid 6287] <... chdir resumed>) = 0 [pid 6286] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6285] <... ioctl resumed>) = 0 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6279] exit_group(0 [pid 6287] <... prctl resumed>) = 0 [pid 6286] <... futex resumed>) = ? [pid 6280] <... futex resumed>) = ? [pid 6279] <... exit_group resumed>) = ? [pid 6287] setpgid(0, 0 [pid 6280] +++ exited with 0 +++ [pid 6286] +++ exited with 0 +++ [pid 6285] close(3) = 0 [pid 6285] close(4) = 0 [pid 6285] mkdir("./file1", 0777 [pid 6287] <... setpgid resumed>) = 0 [pid 6285] <... mkdir resumed>) = 0 [pid 6279] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6279, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./65/file1", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./67/file1", [pid 5075] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5072] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5071] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] write(3, "1000", 4 [pid 5075] newfstatat(4, "", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(AT_FDCWD, "./65/binderfs", [pid 5071] <... openat resumed>) = 4 [pid 6287] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./65/binderfs") = 0 [pid 5072] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6287] close(3 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [ 171.618508][ T6285] loop2: detected capacity change from 0 to 1024 [pid 5071] newfstatat(4, "", [pid 6287] <... close resumed>) = 0 [pid 6285] <... mount resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... ioctl resumed>) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 6285] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6287] <... symlink resumed>) = 0 [pid 6285] <... openat resumed>) = 3 [pid 6285] chdir("./file1" [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(4, [pid 6287] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6285] <... chdir resumed>) = 0 [pid 5075] close(4 [pid 5074] close(3 [pid 5072] <... umount2 resumed>) = 0 [pid 6285] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5075] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6285] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6287] <... futex resumed>) = 0 [pid 6285] <... futex resumed>) = 1 [pid 6281] <... futex resumed>) = 0 [pid 5075] rmdir("./65/file1" [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6287] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6281] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6287] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6285] creat("./file0", 000 [pid 6281] <... futex resumed>) = 0 [pid 6287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6285] <... creat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./65/file1", [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6285] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(4, ./strace-static-x86_64: Process 6288 attached [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6285] <... futex resumed>) = 0 [pid 6281] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(3, [pid 5072] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6288] set_robust_list(0x5555571ca6a0, 24 [pid 6287] <... mmap resumed>) = 0x7eff81ead000 [pid 6285] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6288 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(4 [pid 6288] <... set_robust_list resumed>) = 0 [pid 6287] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6285] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6281] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... close resumed>) = 0 [pid 6288] chdir("./67" [pid 6287] <... mprotect resumed>) = 0 [pid 6285] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6281] <... futex resumed>) = 0 [pid 5075] close(3 [pid 5072] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./67/file1" [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6281] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6288] <... chdir resumed>) = 0 [pid 5075] rmdir("./65" [pid 5072] <... openat resumed>) = 4 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5071] getdents64(3, [pid 6288] <... prctl resumed>) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5075] mkdir("./66", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6289 attached [pid 6287] <... clone3 resumed> => {parent_tid=[6289]}, 88) = 6289 [pid 5072] getdents64(4, [pid 5071] close(3 [pid 6289] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] close(4 [pid 5071] rmdir("./67" [pid 6287] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 6287] <... futex resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6287] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] rmdir("./65/file1") = 0 [pid 6289] <... rseq resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] mkdir("./68", 0777 [pid 6289] set_robust_list(0x7eff81ecd9a0, 24 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6289] <... set_robust_list resumed>) = 0 [pid 5072] close(3 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6289] rt_sigprocmask(SIG_SETMASK, [], [pid 6288] setpgid(0, 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] rmdir("./65" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6289] memfd_create("syzkaller", 0 [pid 6288] <... setpgid resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6289] <... memfd_create resumed>) = 3 [pid 5072] mkdir("./66", 0777 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6289] <... mmap resumed>) = 0x7eff79a00000 [pid 6288] <... openat resumed>) = 3 [pid 5072] <... mkdir resumed>) = 0 [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6288] write(3, "1000", 4) = 4 [pid 6281] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 171.739161][ T6285] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.762121][ T6285] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.769939][ T6285] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.780565][ T6285] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6288] close(3 [pid 6281] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] <... close resumed>) = 0 [pid 6281] <... futex resumed>) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs" [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6288] <... symlink resumed>) = 0 [pid 6288] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6288] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6289] <... write resumed>) = 524288 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6288] <... mmap resumed>) = 0x7eff81ead000 ./strace-static-x86_64: Process 6290 attached [pid 6288] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... ioctl resumed>) = 0 [pid 6290] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6288] <... mprotect resumed>) = 0 [pid 6281] <... clone3 resumed> => {parent_tid=[6290]}, 88) = 6290 [pid 5075] close(3 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6290] <... rseq resumed>) = 0 [pid 6289] munmap(0x7eff79a00000, 138412032 [pid 6288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6281] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... ioctl resumed>) = 0 [pid 6289] <... munmap resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6291 [pid 6288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] close(3) = 0 ./strace-static-x86_64: Process 6291 attached [pid 6289] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6281] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6290] set_robust_list(0x7eff81eac9a0, 24 [pid 6281] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6292 attached [pid 6291] set_robust_list(0x5555571ca6a0, 24 [pid 6290] <... set_robust_list resumed>) = 0 [pid 6289] <... openat resumed>) = 4 [pid 6281] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] close(3 [pid 6292] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6291] <... set_robust_list resumed>) = 0 [pid 6290] rt_sigprocmask(SIG_SETMASK, [], [pid 6289] ioctl(4, LOOP_SET_FD, 3 [pid 6288] <... clone3 resumed> => {parent_tid=[6292]}, 88) = 6292 [pid 6292] <... rseq resumed>) = 0 [pid 6291] chdir("./66" [pid 6290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... close resumed>) = 0 [pid 6292] set_robust_list(0x7eff81ecd9a0, 24 [pid 6291] <... chdir resumed>) = 0 [pid 6290] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6289] <... ioctl resumed>) = 0 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6292] <... set_robust_list resumed>) = 0 [pid 6291] <... prctl resumed>) = 0 [pid 6288] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6293 attached [pid 6292] rt_sigprocmask(SIG_SETMASK, [], [pid 6291] setpgid(0, 0 [pid 6288] <... futex resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6293 [pid 6291] <... setpgid resumed>) = 0 [pid 6288] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] set_robust_list(0x5555571ca6a0, 24 [pid 6292] memfd_create("syzkaller", 0 [pid 6291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6292] <... memfd_create resumed>) = 3 [pid 6290] <... open resumed>) = 5 [pid 6292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6290] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... mmap resumed>) = 0x7eff79a00000 [pid 6290] <... futex resumed>) = 1 [pid 6281] <... futex resumed>) = 0 [pid 6293] <... set_robust_list resumed>) = 0 [pid 6291] <... openat resumed>) = 3 [pid 6290] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6294 attached [pid 6293] chdir("./68" [pid 6291] write(3, "1000", 4 [pid 6285] <... write resumed>) = 53248 [pid 6294] set_robust_list(0x5555571ca6a0, 24 [pid 6291] <... write resumed>) = 4 [pid 6285] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6294 [pid 6294] <... set_robust_list resumed>) = 0 [pid 6293] <... chdir resumed>) = 0 [pid 6291] close(3 [pid 6285] <... futex resumed>) = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6291] <... close resumed>) = 0 [pid 6291] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6285] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] exit_group(0 [pid 6290] <... futex resumed>) = ? [pid 6285] <... futex resumed>) = ? [pid 6294] chdir("./66" [pid 6281] <... exit_group resumed>) = ? [pid 6293] <... prctl resumed>) = 0 [pid 6291] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] close(3 [pid 6285] +++ exited with 0 +++ [pid 6294] <... chdir resumed>) = 0 [pid 6293] setpgid(0, 0 [pid 6291] <... futex resumed>) = 0 [pid 6289] <... close resumed>) = 0 [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6293] <... setpgid resumed>) = 0 [pid 6291] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6289] close(4 [pid 6294] <... prctl resumed>) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6291] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6289] <... close resumed>) = 0 [pid 6294] setpgid(0, 0 [pid 6291] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6289] mkdir("./file1", 0777 [pid 6294] <... setpgid resumed>) = 0 [pid 6293] <... openat resumed>) = 3 [pid 6291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] <... mkdir resumed>) = 0 [pid 6291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 171.826552][ T6285] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.837149][ T6285] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.854170][ T6289] loop5: detected capacity change from 0 to 1024 [pid 6289] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6293] write(3, "1000", 4 [pid 6291] <... mmap resumed>) = 0x7eff81ead000 [pid 6290] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 6291] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6294] <... openat resumed>) = 3 [pid 6293] <... write resumed>) = 4 [pid 6291] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6293] close(3 [pid 6291] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6293] <... close resumed>) = 0 [pid 6291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6293] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6295 attached [pid 6293] <... symlink resumed>) = 0 [pid 6291] <... clone3 resumed> => {parent_tid=[6295]}, 88) = 6295 [pid 6295] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6293] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6291] rt_sigprocmask(SIG_SETMASK, [], [pid 6295] <... rseq resumed>) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6295] set_robust_list(0x7eff81ecd9a0, 24 [pid 6293] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6291] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6295] <... set_robust_list resumed>) = 0 [pid 6293] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6291] <... futex resumed>) = 0 [pid 6294] write(3, "1000", 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] rt_sigprocmask(SIG_SETMASK, [], [pid 6294] <... write resumed>) = 4 [pid 6293] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6291] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] close(3 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6295] memfd_create("syzkaller", 0 [pid 6294] <... close resumed>) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] newfstatat(3, "", [pid 6295] <... memfd_create resumed>) = 3 [pid 6293] <... mmap resumed>) = 0x7eff81ead000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6293] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5073] getdents64(3, [pid 6295] <... mmap resumed>) = 0x7eff79a00000 [pid 6293] <... mprotect resumed>) = 0 [pid 6294] symlink("/dev/binderfs", "./binderfs" [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6294] <... symlink resumed>) = 0 [pid 6293] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6294] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6294] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5073] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] <... mount resumed>) = 0 [pid 6294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6294] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6289] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] unlink("./66/binderfs" [pid 6289] <... openat resumed>) = 3 [pid 5073] <... unlink resumed>) = 0 [pid 6293] <... clone3 resumed> => {parent_tid=[6296]}, 88) = 6296 [pid 6289] chdir("./file1"./strace-static-x86_64: Process 6296 attached [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6289] <... chdir resumed>) = 0 [pid 5073] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6296] <... rseq resumed>) = 0 [pid 6294] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6293] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... write resumed>) = 524288 [pid 6289] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6293] <... futex resumed>) = 0 [pid 6293] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6296] set_robust_list(0x7eff81ecd9a0, 24 [pid 6289] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... set_robust_list resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], [pid 6289] creat("./file0", 000 [pid 6287] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6289] <... creat resumed>) = 4 [pid 6287] <... futex resumed>) = 0 [pid 6296] memfd_create("syzkaller", 0 [pid 6294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6289] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] <... memfd_create resumed>) = 3 [pid 6292] munmap(0x7eff79a00000, 138412032 [pid 6289] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6289] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6287] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... mmap resumed>) = 0x7eff79a00000 [pid 6294] <... clone3 resumed> => {parent_tid=[6297]}, 88) = 6297 [pid 6292] <... munmap resumed>) = 0 [pid 6287] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6297 attached [pid 6295] <... write resumed>) = 524288 [pid 6294] rt_sigprocmask(SIG_SETMASK, [], [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6287] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6295] munmap(0x7eff79a00000, 138412032 [pid 6294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6292] <... openat resumed>) = 4 [pid 6297] <... rseq resumed>) = 0 [pid 6294] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] set_robust_list(0x7eff81ecd9a0, 24 [pid 6294] <... futex resumed>) = 0 [pid 6292] ioctl(4, LOOP_SET_FD, 3 [pid 6294] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6297] <... set_robust_list resumed>) = 0 [pid 6292] <... ioctl resumed>) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], [pid 6296] <... write resumed>) = 524288 [pid 6295] <... munmap resumed>) = 0 [pid 6292] close(3 [pid 6297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6296] munmap(0x7eff79a00000, 138412032 [pid 6295] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6292] <... close resumed>) = 0 [pid 6297] memfd_create("syzkaller", 0 [pid 6292] close(4 [pid 6295] <... openat resumed>) = 4 [pid 6292] <... close resumed>) = 0 [pid 6295] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6292] mkdir("./file1", 0777 [pid 6287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6287] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] <... munmap resumed>) = 0 [pid 6292] <... mkdir resumed>) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6287] <... mmap resumed>) = 0x7eff81e8c000 [pid 6287] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5073] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] <... memfd_create resumed>) = 3 [pid 6287] <... clone3 resumed> => {parent_tid=[6298]}, 88) = 6298 [pid 6297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] newfstatat(AT_FDCWD, "./66/file1", ./strace-static-x86_64: Process 6298 attached [pid 6297] <... mmap resumed>) = 0x7eff79a00000 [pid 6287] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6298] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6287] <... futex resumed>) = 0 [pid 5073] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6298] <... rseq resumed>) = 0 [pid 6287] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6298] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 5073] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6298] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./66/file1") = 0 [ 171.974969][ T6292] loop3: detected capacity change from 0 to 1024 [ 171.984547][ T6289] hfsplus: request for non-existent node 16777216 in B*Tree [ 171.991874][ T6289] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.005283][ T6295] loop4: detected capacity change from 0 to 1024 [pid 5073] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6296] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6295] close(3 [pid 6292] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] close(3) = 0 [pid 5073] rmdir("./66" [pid 6296] <... openat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 6296] ioctl(4, LOOP_SET_FD, 3 [pid 5073] mkdir("./67", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6296] <... ioctl resumed>) = 0 [pid 6295] <... close resumed>) = 0 [pid 6295] close(4 [pid 6298] <... open resumed>) = 5 [pid 6298] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6295] <... close resumed>) = 0 [pid 6292] <... mount resumed>) = 0 [pid 6287] <... futex resumed>) = 0 [pid 6298] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6295] mkdir("./file1", 0777 [pid 6292] <... openat resumed>) = 3 [pid 6295] <... mkdir resumed>) = 0 [pid 6292] chdir("./file1") = 0 [pid 6295] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6292] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6292] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6292] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] close(3 [pid 6292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6292] creat("./file0", 000 [pid 6288] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] <... close resumed>) = 0 [pid 6296] close(4 [pid 6292] <... creat resumed>) = 4 [pid 6297] <... write resumed>) = 524288 [pid 6296] <... close resumed>) = 0 [pid 6292] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] <... mount resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [ 172.047790][ T6289] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.064551][ T6296] loop0: detected capacity change from 0 to 1024 [ 172.069862][ T6289] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6296] mkdir("./file1", 0777 [pid 6295] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6292] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6288] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] <... openat resumed>) = 3 [pid 6288] <... futex resumed>) = 0 [pid 6295] chdir("./file1" [pid 6292] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6288] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] munmap(0x7eff79a00000, 138412032 [pid 6295] <... chdir resumed>) = 0 [pid 6297] <... munmap resumed>) = 0 [pid 6296] <... mkdir resumed>) = 0 [pid 6295] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6295] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6296] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6295] <... futex resumed>) = 1 [pid 6291] <... futex resumed>) = 0 [pid 6297] <... openat resumed>) = 4 [pid 6291] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] creat("./file0", 000 [pid 6291] <... futex resumed>) = 0 [pid 6297] ioctl(4, LOOP_SET_FD, 3 [pid 6291] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] <... ioctl resumed>) = 0 [pid 6295] <... creat resumed>) = 4 [ 172.121822][ T6289] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.153126][ T6297] loop1: detected capacity change from 0 to 1024 [ 172.157895][ T6292] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6296] <... mount resumed>) = 0 [pid 6295] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6291] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] close(3 [pid 6296] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6295] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... close resumed>) = 0 [ 172.160211][ T6289] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6296] <... openat resumed>) = 3 [pid 6295] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6291] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] chdir("./file1" [pid 6295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6291] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6296] <... chdir resumed>) = 0 [pid 6291] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6296] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6295] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6288] <... mmap resumed>) = 0x7eff81e8c000 ./strace-static-x86_64: Process 6299 attached [pid 6296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6299 [pid 6299] set_robust_list(0x5555571ca6a0, 24 [pid 6296] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6299] <... set_robust_list resumed>) = 0 [pid 6297] close(3 [pid 6288] <... mprotect resumed>) = 0 [pid 6299] chdir("./67" [pid 6297] <... close resumed>) = 0 [pid 6296] <... futex resumed>) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6299] <... chdir resumed>) = 0 [pid 6297] close(4 [pid 6293] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6297] <... close resumed>) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6299] <... prctl resumed>) = 0 [pid 6297] mkdir("./file1", 0777 [pid 6293] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] setpgid(0, 0 [pid 6297] <... mkdir resumed>) = 0 [pid 6296] creat("./file0", 000 [pid 6288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6299] <... setpgid resumed>) = 0 [pid 6297] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6296] <... creat resumed>) = 4 [pid 6288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6299] <... openat resumed>) = 3 [pid 6299] write(3, "1000", 4) = 4 [pid 6299] close(3) = 0 [pid 6299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6296] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6300 attached [pid 6299] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... mount resumed>) = 0 [pid 6296] <... futex resumed>) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6293] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 172.195988][ T6295] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.207619][ T6292] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6293] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6300] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6299] <... futex resumed>) = 0 [pid 6296] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6289] <... write resumed>) = 53248 [pid 6288] <... clone3 resumed> => {parent_tid=[6300]}, 88) = 6300 [pid 6299] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6299] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6289] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6297] <... openat resumed>) = 3 [pid 6289] <... futex resumed>) = 0 [pid 6287] exit_group(0 [pid 6299] <... mmap resumed>) = 0x7eff81ead000 [pid 6298] <... futex resumed>) = ? [pid 6297] chdir("./file1" [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] <... exit_group resumed>) = ? [pid 6300] <... rseq resumed>) = 0 [pid 6299] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6298] +++ exited with 0 +++ [pid 6297] <... chdir resumed>) = 0 [pid 6291] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6289] +++ exited with 0 +++ [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6299] <... mprotect resumed>) = 0 [pid 6297] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6300] set_robust_list(0x7eff81eac9a0, 24 [pid 6299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6297] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6291] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6297] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6297] <... futex resumed>) = 1 [pid 6299] <... clone3 resumed> => {parent_tid=[6301]}, 88) = 6301 ./strace-static-x86_64: Process 6301 attached [pid 6299] rt_sigprocmask(SIG_SETMASK, [], [pid 6297] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] +++ exited with 0 +++ [pid 6301] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6301] <... rseq resumed>) = 0 [pid 6299] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6301] set_robust_list(0x7eff81ecd9a0, 24 [pid 6299] <... futex resumed>) = 0 [pid 6301] <... set_robust_list resumed>) = 0 [pid 6300] <... set_robust_list resumed>) = 0 [pid 6299] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6294] <... futex resumed>) = 0 [pid 6291] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6301] rt_sigprocmask(SIG_SETMASK, [], [ 172.238741][ T6292] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.250080][ T6295] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.259676][ T6296] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.262621][ T6292] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.274795][ T6295] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6300] rt_sigprocmask(SIG_SETMASK, [], [pid 6294] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6288] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6291] <... mmap resumed>) = 0x7eff81e8c000 [pid 6301] memfd_create("syzkaller", 0 [pid 6300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6297] <... futex resumed>) = 0 [pid 6294] <... futex resumed>) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6301] <... memfd_create resumed>) = 3 [pid 6300] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6297] creat("./file0", 000 [pid 6294] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6291] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6297] <... creat resumed>) = 4 [pid 6293] <... mmap resumed>) = 0x7eff81e8c000 [pid 6297] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6297] <... futex resumed>) = 0 [pid 6293] <... mprotect resumed>) = 0 [pid 6297] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6301] <... mmap resumed>) = 0x7eff79a00000 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6293] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6291] <... mprotect resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] <... open resumed>) = 5 [pid 6293] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6293] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6302 attached [pid 6300] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6291] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6302] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6300] <... futex resumed>) = 1 [pid 6297] <... futex resumed>) = 0 [pid 6294] <... futex resumed>) = 1 [pid 6293] <... clone3 resumed> => {parent_tid=[6302]}, 88) = 6302 [pid 6291] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6288] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [ 172.292127][ T6296] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.299969][ T6296] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.302085][ T6295] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.324750][ T6292] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6302] <... rseq resumed>) = 0 [pid 6301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6300] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6297] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6294] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] newfstatat(3, "", [pid 6302] set_robust_list(0x7eff81eac9a0, 24 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6302] <... set_robust_list resumed>) = 0 [pid 6293] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6302] rt_sigprocmask(SIG_SETMASK, [], [pid 6293] <... futex resumed>) = 0 [pid 6302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6291] <... clone3 resumed> => {parent_tid=[6303]}, 88) = 6303 [pid 5076] getdents64(3, [pid 6302] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000./strace-static-x86_64: Process 6303 attached [pid 6291] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6303] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6291] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6303] <... rseq resumed>) = 0 [pid 6291] <... futex resumed>) = 0 [pid 6303] set_robust_list(0x7eff81eac9a0, 24 [pid 6291] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6303] <... set_robust_list resumed>) = 0 [pid 6301] <... write resumed>) = 524288 [pid 5076] unlink("./66/binderfs" [pid 6303] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... unlink resumed>) = 0 [pid 6303] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 172.336437][ T6295] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.349941][ T6292] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.352150][ T6296] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.360785][ T6297] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.378509][ T6295] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6303] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6301] munmap(0x7eff79a00000, 138412032) = 0 [pid 6293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6294] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6303] <... open resumed>) = 5 [pid 6301] <... openat resumed>) = 4 [pid 6294] <... mmap resumed>) = 0x7eff81e8c000 [pid 6292] <... write resumed>) = 53248 [pid 6301] ioctl(4, LOOP_SET_FD, 3 [pid 6303] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6292] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 1 [pid 6294] <... mprotect resumed>) = 0 [pid 6292] <... futex resumed>) = 0 [pid 6291] <... futex resumed>) = 0 [ 172.394024][ T6297] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.408732][ T6297] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.412896][ T6301] loop2: detected capacity change from 0 to 1024 [pid 6303] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6302] <... open resumed>) = 5 [pid 6295] <... write resumed>) = 53248 [pid 6294] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6292] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... umount2 resumed>) = 0 [pid 6302] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6301] <... ioctl resumed>) = 0 [pid 6295] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6288] exit_group(0 [pid 6302] <... futex resumed>) = 0 [pid 6301] close(3 [pid 6295] <... futex resumed>) = 0 [pid 6294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6288] <... exit_group resumed>) = ? [pid 6292] <... futex resumed>) = ? [pid 6300] <... futex resumed>) = ? [pid 6302] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6301] <... close resumed>) = 0 [pid 6295] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6304 attached [pid 6301] close(4 [pid 6300] +++ exited with 0 +++ [pid 6292] +++ exited with 0 +++ [pid 6291] exit_group(0 [pid 6288] +++ exited with 0 +++ [pid 6304] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6303] <... futex resumed>) = ? [pid 6301] <... close resumed>) = 0 [pid 6295] <... futex resumed>) = ? [pid 6291] <... exit_group resumed>) = ? [pid 6295] +++ exited with 0 +++ [pid 5076] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6304] <... rseq resumed>) = 0 [pid 6303] +++ exited with 0 +++ [pid 6301] mkdir("./file1", 0777 [pid 6291] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5076] <... openat resumed>) = 4 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6291, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5074] <... restart_syscall resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6304] set_robust_list(0x7eff81eac9a0, 24 [pid 6301] <... mkdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6304] <... set_robust_list resumed>) = 0 [pid 6301] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6294] <... clone3 resumed> => {parent_tid=[6304]}, 88) = 6304 [pid 6304] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] getdents64(4, [pid 5075] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6304] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6294] <... futex resumed>) = 1 [pid 5075] newfstatat(3, "", [pid 6304] <... futex resumed>) = 0 [pid 6294] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6301] <... mount resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 5074] newfstatat(3, "", [pid 6304] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] close(4 [pid 6301] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 6301] chdir("./file1" [pid 5076] rmdir("./66/file1" [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6301] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 172.441288][ T6296] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.449457][ T6297] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.469460][ T6296] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.484839][ T6297] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] unlink("./66/binderfs") = 0 [pid 5075] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./66" [pid 6304] <... open resumed>) = 5 [pid 6301] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6297] <... write resumed>) = 53248 [pid 5074] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 6304] <... futex resumed>) = 1 [pid 6301] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] <... futex resumed>) = 0 [pid 6297] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6301] <... futex resumed>) = 1 [pid 6299] <... futex resumed>) = 0 [pid 6294] exit_group(0 [pid 5076] mkdir("./67", 0777 [pid 5074] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6304] <... futex resumed>) = ? [pid 6301] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... futex resumed>) = ? [pid 6294] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6299] <... futex resumed>) = 0 [pid 6297] +++ exited with 0 +++ [pid 6296] <... write resumed>) = 53248 [pid 5076] <... mkdir resumed>) = 0 [pid 6296] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6296] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6296] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] exit_group(0 [pid 6302] <... futex resumed>) = ? [pid 6296] <... futex resumed>) = ? [pid 6293] <... exit_group resumed>) = ? [pid 6304] +++ exited with 0 +++ [pid 6302] +++ exited with 0 +++ [pid 6301] creat("./file0", 000 [pid 6299] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] +++ exited with 0 +++ [pid 6294] +++ exited with 0 +++ [pid 6293] +++ exited with 0 +++ [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./67/binderfs" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6301] <... creat resumed>) = 4 [pid 6301] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 6301] <... futex resumed>) = 1 [pid 6299] <... futex resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./66/file1", [pid 5074] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6301] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6299] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 172.506281][ T6297] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] <... futex resumed>) = 0 [pid 5075] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6299] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5074] newfstatat(AT_FDCWD, "./67/file1", [pid 5072] newfstatat(3, "", [pid 5071] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(3, "", [pid 5072] getdents64(3, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] getdents64(3, [pid 5072] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./66/binderfs", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5072] unlink("./66/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5071] unlink("./68/binderfs" [pid 5072] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... ioctl resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] getdents64(4, [pid 5074] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5074] newfstatat(4, "", [pid 5075] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./66/file1" [pid 5074] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] getdents64(3, [pid 5074] getdents64(4, [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5075] close(3) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] rmdir("./66" [ 172.564165][ T6301] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.576521][ T6301] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] rmdir("./67/file1" [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] close(3 [pid 6299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6299] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] mkdir("./67", 0777 [pid 6299] <... futex resumed>) = 0 [pid 6299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(AT_FDCWD, "./66/file1", [pid 6299] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5074] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6305 ./strace-static-x86_64: Process 6305 attached [pid 6299] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./67" [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] mkdir("./68", 0777 [pid 6305] set_robust_list(0x5555571ca6a0, 24 [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6305] <... set_robust_list resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6305] chdir("./67" [pid 6299] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(AT_FDCWD, "./68/file1", [pid 6299] <... clone3 resumed> => {parent_tid=[6306]}, 88) = 6306 [pid 6305] <... chdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6305] <... prctl resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] setpgid(0, 0) = 0 [pid 6299] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] <... futex resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6306 attached [pid 5071] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6306] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6299] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] close(4 [pid 5071] <... openat resumed>) = 4 [pid 6306] <... rseq resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6306] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6306] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] rmdir("./66/file1" [pid 6306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] getdents64(4, [pid 6306] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [ 172.605996][ T6301] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.619538][ T6301] hfsplus: request for non-existent node 16777216 in B*Tree [ 172.640778][ T6301] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6305] <... openat resumed>) = 3 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./68/file1") = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5071] close(3 [pid 6305] write(3, "1000", 4 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6305] <... write resumed>) = 4 [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./68" [pid 6305] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] rmdir("./66" [pid 5071] mkdir("./69", 0777 [pid 6305] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5072] mkdir("./67", 0777 [pid 6305] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6305] <... symlink resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... openat resumed>) = 3 [pid 6305] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6305] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6305] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6305] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6301] <... write resumed>) = 53248 [pid 5075] close(3 [pid 6306] <... open resumed>) = 5 [pid 6306] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6299] <... futex resumed>) = 0 [pid 6306] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] <... mprotect resumed>) = 0 [pid 6301] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6301] <... futex resumed>) = 0 [pid 6299] exit_group(0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6301] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] <... exit_group resumed>) = ? [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6301] <... futex resumed>) = ? [pid 6306] <... futex resumed>) = ? [pid 6301] +++ exited with 0 +++ [pid 6306] +++ exited with 0 +++ [pid 6299] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6299, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [ 172.659755][ T6301] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6307]}, 88) = 6307 [pid 5073] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6307 attached [pid 6305] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6307] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6308 [pid 5074] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6307] <... rseq resumed>) = 0 [pid 6305] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6308 attached [pid 6307] set_robust_list(0x7eff81ecd9a0, 24 [pid 6305] <... futex resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... openat resumed>) = 3 [pid 5072] close(3 [pid 6307] <... set_robust_list resumed>) = 0 [pid 6305] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] newfstatat(3, "", [pid 6308] set_robust_list(0x5555571ca6a0, 24 [pid 5072] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6307] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] getdents64(3, [pid 6307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6307] memfd_create("syzkaller", 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] <... set_robust_list resumed>) = 0 [pid 6308] chdir("./67" [pid 6307] <... memfd_create resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6308] <... chdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6307] <... mmap resumed>) = 0x7eff79a00000 [pid 5073] unlink("./67/binderfs" [pid 6308] <... prctl resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6308] setpgid(0, 0 [pid 6307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5073] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6308] <... setpgid resumed>) = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] close(3 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6310 [pid 5071] <... close resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6309 ./strace-static-x86_64: Process 6310 attached [pid 6308] write(3, "1000", 4 [pid 6310] set_robust_list(0x5555571ca6a0, 24 [pid 6308] <... write resumed>) = 4 [pid 6310] <... set_robust_list resumed>) = 0 [pid 6308] close(3 [pid 6310] chdir("./67" [pid 6308] <... close resumed>) = 0 [pid 6310] <... chdir resumed>) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6309 attached [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6308] <... symlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6308] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] <... prctl resumed>) = 0 [pid 6308] <... futex resumed>) = 0 [pid 6310] setpgid(0, 0 [pid 6308] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6310] <... setpgid resumed>) = 0 [pid 6308] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6309] set_robust_list(0x5555571ca6a0, 24 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6309] <... set_robust_list resumed>) = 0 [pid 6309] chdir("./68" [pid 6310] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 6310] write(3, "1000", 4) = 4 [pid 6310] close(3) = 0 ./strace-static-x86_64: Process 6311 attached [pid 6310] symlink("/dev/binderfs", "./binderfs" [pid 6308] <... mmap resumed>) = 0x7eff81ead000 [pid 6311] set_robust_list(0x5555571ca6a0, 24 [pid 6310] <... symlink resumed>) = 0 [pid 6308] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6311] <... set_robust_list resumed>) = 0 [pid 6308] <... mprotect resumed>) = 0 [pid 6311] chdir("./69" [pid 6308] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6307] <... write resumed>) = 524288 [pid 6309] <... chdir resumed>) = 0 [pid 6308] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6311 [pid 6308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6311] <... chdir resumed>) = 0 [pid 6311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6310] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... clone3 resumed> => {parent_tid=[6312]}, 88) = 6312 [pid 6311] <... prctl resumed>) = 0 [pid 6310] <... futex resumed>) = 0 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], [pid 6310] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6310] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6308] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6308] <... futex resumed>) = 0 [pid 6311] setpgid(0, 0 [pid 6308] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6310] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6312 attached [pid 6311] <... setpgid resumed>) = 0 [pid 6310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6312] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6312] <... rseq resumed>) = 0 [pid 6310] <... mmap resumed>) = 0x7eff81ead000 [pid 6312] set_robust_list(0x7eff81ecd9a0, 24 [pid 6310] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6312] <... set_robust_list resumed>) = 0 [pid 6310] <... mprotect resumed>) = 0 [pid 6309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6310] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] <... prctl resumed>) = 0 [pid 6312] rt_sigprocmask(SIG_SETMASK, [], [pid 6311] <... openat resumed>) = 3 [pid 6309] setpgid(0, 0 [pid 6310] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6311] write(3, "1000", 4 [pid 6310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6309] <... setpgid resumed>) = 0 [pid 6312] memfd_create("syzkaller", 0 [pid 6311] <... write resumed>) = 4 [pid 5073] newfstatat(AT_FDCWD, "./67/file1", [pid 6311] close(3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6312] <... memfd_create resumed>) = 3 [pid 6311] <... close resumed>) = 0 [pid 6309] <... openat resumed>) = 3 [pid 5073] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6309] write(3, "1000", 4 [pid 6311] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... openat resumed>) = 4 [pid 6309] <... write resumed>) = 4 [pid 6311] <... symlink resumed>) = 0 [pid 6309] close(3 [pid 5073] newfstatat(4, "", [pid 6309] <... close resumed>) = 0 [pid 6310] <... clone3 resumed> => {parent_tid=[6313]}, 88) = 6313 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6309] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6313 attached [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] rt_sigprocmask(SIG_SETMASK, [], [pid 6312] <... mmap resumed>) = 0x7eff79a00000 [pid 6311] <... futex resumed>) = 0 [pid 6309] <... symlink resumed>) = 0 [pid 6310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6311] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6310] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] munmap(0x7eff79a00000, 138412032 [pid 5073] getdents64(4, [pid 6313] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6311] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6310] <... futex resumed>) = 0 [pid 6313] <... rseq resumed>) = 0 [pid 6311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6310] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6313] set_robust_list(0x7eff81ecd9a0, 24 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6313] <... set_robust_list resumed>) = 0 [pid 6311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6313] rt_sigprocmask(SIG_SETMASK, [], [pid 6311] <... mmap resumed>) = 0x7eff81ead000 [pid 5073] getdents64(4, [pid 6313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6311] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6307] <... munmap resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6309] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] memfd_create("syzkaller", 0 [pid 6311] <... mprotect resumed>) = 0 [pid 6313] <... memfd_create resumed>) = 3 [pid 6309] <... futex resumed>) = 0 [pid 6307] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5073] close(4 [pid 6313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6309] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6307] <... openat resumed>) = 4 [pid 5073] <... close resumed>) = 0 [pid 6309] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5073] rmdir("./67/file1" [pid 6309] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6313] <... mmap resumed>) = 0x7eff79a00000 [pid 6311] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6307] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... rmdir resumed>) = 0 [pid 6309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6314 attached [pid 6311] <... clone3 resumed> => {parent_tid=[6314]}, 88) = 6314 [pid 6314] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6311] rt_sigprocmask(SIG_SETMASK, [], [pid 6314] <... rseq resumed>) = 0 [pid 6313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6309] <... mmap resumed>) = 0x7eff81ead000 [pid 6314] set_robust_list(0x7eff81ecd9a0, 24 [pid 6311] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... set_robust_list resumed>) = 0 [pid 6311] <... futex resumed>) = 0 [pid 6314] rt_sigprocmask(SIG_SETMASK, [], [pid 6311] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6314] memfd_create("syzkaller", 0 [pid 6309] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5073] getdents64(3, [pid 6314] <... memfd_create resumed>) = 3 [pid 6313] <... write resumed>) = 524288 [pid 6312] <... write resumed>) = 524288 [pid 6309] <... mprotect resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6314] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] close(3 [pid 6314] <... mmap resumed>) = 0x7eff79a00000 [pid 6307] <... ioctl resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6312] munmap(0x7eff79a00000, 138412032 [pid 6309] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6307] close(3 [pid 5073] rmdir("./67" [pid 6309] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6307] <... close resumed>) = 0 [pid 6313] munmap(0x7eff79a00000, 138412032 [pid 6312] <... munmap resumed>) = 0 [pid 6309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6307] close(4 [pid 5073] <... rmdir resumed>) = 0 [pid 6307] <... close resumed>) = 0 [pid 5073] mkdir("./68", 0777./strace-static-x86_64: Process 6315 attached [pid 6314] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6313] <... munmap resumed>) = 0 [pid 6312] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 172.878289][ T6307] loop5: detected capacity change from 0 to 1024 [pid 6307] mkdir("./file1", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 6315] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6314] <... write resumed>) = 524288 [pid 6312] <... openat resumed>) = 4 [pid 6309] <... clone3 resumed> => {parent_tid=[6315]}, 88) = 6315 [pid 6307] <... mkdir resumed>) = 0 [pid 6315] <... rseq resumed>) = 0 [pid 6313] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6315] set_robust_list(0x7eff81ecd9a0, 24 [pid 6313] <... openat resumed>) = 4 [pid 6312] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... openat resumed>) = 3 [pid 6315] <... set_robust_list resumed>) = 0 [pid 6313] ioctl(4, LOOP_SET_FD, 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6315] rt_sigprocmask(SIG_SETMASK, [], [pid 6309] rt_sigprocmask(SIG_SETMASK, [], [pid 6307] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6314] munmap(0x7eff79a00000, 138412032 [pid 6313] <... ioctl resumed>) = 0 [pid 6312] <... ioctl resumed>) = 0 [pid 6309] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... munmap resumed>) = 0 [pid 6309] <... futex resumed>) = 0 [pid 6313] close(3 [pid 6312] close(3 [pid 6315] memfd_create("syzkaller", 0 [pid 6314] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6313] <... close resumed>) = 0 [pid 6312] <... close resumed>) = 0 [pid 6309] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6307] <... mount resumed>) = 0 [pid 6313] close(4 [pid 6312] close(4 [pid 6313] <... close resumed>) = 0 [pid 6312] <... close resumed>) = 0 [pid 6307] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6315] <... memfd_create resumed>) = 3 [pid 6313] mkdir("./file1", 0777 [pid 6312] mkdir("./file1", 0777 [pid 6307] <... openat resumed>) = 3 [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] chdir("./file1" [pid 6315] <... mmap resumed>) = 0x7eff79a00000 [pid 6313] <... mkdir resumed>) = 0 [pid 6312] <... mkdir resumed>) = 0 [pid 6314] <... openat resumed>) = 4 [pid 6312] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6307] <... chdir resumed>) = 0 [pid 6307] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6314] ioctl(4, LOOP_SET_FD, 3 [pid 6313] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6307] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6307] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = 0 [pid 6305] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6305] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] creat("./file0", 000) = 4 [pid 6307] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6313] <... mount resumed>) = 0 [pid 6307] <... futex resumed>) = 1 [pid 6305] <... futex resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6307] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... ioctl resumed>) = 0 [pid 6313] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6312] <... mount resumed>) = 0 [pid 6307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6305] <... futex resumed>) = 0 [pid 6313] <... openat resumed>) = 3 [pid 6305] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6312] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6314] close(3 [pid 6313] chdir("./file1" [pid 6314] <... close resumed>) = 0 [pid 6312] <... openat resumed>) = 3 [pid 6314] close(4 [pid 6313] <... chdir resumed>) = 0 [pid 6312] chdir("./file1" [pid 6307] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5073] close(3 [pid 6314] <... close resumed>) = 0 [pid 6313] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6312] <... chdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6314] mkdir("./file1", 0777 [pid 6313] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6312] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6314] <... mkdir resumed>) = 0 [pid 6313] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 172.947460][ T6313] loop1: detected capacity change from 0 to 1024 [ 172.947778][ T6312] loop4: detected capacity change from 0 to 1024 [ 172.979137][ T6314] loop0: detected capacity change from 0 to 1024 [pid 6312] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] <... write resumed>) = 524288 [pid 6314] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6313] <... futex resumed>) = 1 [pid 6312] <... futex resumed>) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6308] <... futex resumed>) = 0 [pid 6315] munmap(0x7eff79a00000, 138412032 [pid 6310] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] <... munmap resumed>) = 0 [pid 6313] creat("./file0", 000 [pid 6312] creat("./file0", 000 [pid 6310] <... futex resumed>) = 0 [pid 6308] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6316 attached [pid 6315] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6314] <... mount resumed>) = 0 [pid 6313] <... creat resumed>) = 4 [pid 6312] <... creat resumed>) = 4 [pid 6310] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6313] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6315] <... openat resumed>) = 4 [pid 6314] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6312] <... futex resumed>) = 0 [pid 6313] <... futex resumed>) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6308] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] ioctl(4, LOOP_SET_FD, 3 [pid 6312] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6310] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... futex resumed>) = 0 [pid 6313] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6310] <... futex resumed>) = 0 [pid 6308] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6310] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6316] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6316] chdir("./68" [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6316 [pid 6316] <... chdir resumed>) = 0 [pid 6316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6316] setpgid(0, 0 [pid 6314] <... openat resumed>) = 3 [pid 6315] <... ioctl resumed>) = 0 [pid 6316] <... setpgid resumed>) = 0 [pid 6316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6315] close(3 [pid 6314] chdir("./file1" [pid 6305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6316] <... openat resumed>) = 3 [pid 6305] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6316] write(3, "1000", 4 [pid 6305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6316] <... write resumed>) = 4 [pid 6315] <... close resumed>) = 0 [pid 6314] <... chdir resumed>) = 0 [pid 6305] <... mmap resumed>) = 0x7eff81e8c000 [pid 6305] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6314] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6315] close(4 [pid 6316] close(3 [pid 6305] <... mprotect resumed>) = 0 [pid 6316] <... close resumed>) = 0 [pid 6316] symlink("/dev/binderfs", "./binderfs" [pid 6305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 173.040096][ T6307] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.053212][ T6315] loop3: detected capacity change from 0 to 1024 [ 173.067544][ T6313] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.070221][ T6307] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6316] <... symlink resumed>) = 0 [pid 6305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6317]}, 88) = 6317 [pid 6305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6317 attached [pid 6316] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] <... close resumed>) = 0 [pid 6314] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6305] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6316] <... futex resumed>) = 0 [pid 6315] mkdir("./file1", 0777 [pid 6314] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] <... futex resumed>) = 0 [pid 6317] <... rseq resumed>) = 0 [pid 6316] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6305] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6316] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6314] <... futex resumed>) = 1 [pid 6316] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6317] set_robust_list(0x7eff81eac9a0, 24 [pid 6316] <... mprotect resumed>) = 0 [pid 6315] <... mkdir resumed>) = 0 [pid 6314] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6311] <... futex resumed>) = 0 [pid 6310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6317] <... set_robust_list resumed>) = 0 [pid 6316] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6317] rt_sigprocmask(SIG_SETMASK, [], [pid 6315] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6311] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6316] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6314] <... futex resumed>) = 0 [pid 6311] <... futex resumed>) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6308] <... futex resumed>) = 0 [pid 6317] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6314] creat("./file0", 000 [pid 6311] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6318 attached [pid 6316] <... clone3 resumed> => {parent_tid=[6318]}, 88) = 6318 [pid 6314] <... creat resumed>) = 4 [pid 6310] <... mmap resumed>) = 0x7eff81e8c000 [pid 6308] <... mmap resumed>) = 0x7eff81e8c000 [pid 6318] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6316] rt_sigprocmask(SIG_SETMASK, [], [pid 6314] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6308] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6318] <... rseq resumed>) = 0 [pid 6316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6310] <... mprotect resumed>) = 0 [pid 6318] set_robust_list(0x7eff81ecd9a0, 24 [ 173.086083][ T6312] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.097879][ T6313] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.107465][ T6312] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.116966][ T6307] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6316] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... futex resumed>) = 1 [pid 6315] <... mount resumed>) = 0 [pid 6311] <... futex resumed>) = 0 [pid 6310] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6308] <... mprotect resumed>) = 0 [pid 6318] <... set_robust_list resumed>) = 0 [pid 6316] <... futex resumed>) = 0 [pid 6318] rt_sigprocmask(SIG_SETMASK, [], [pid 6316] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6318] memfd_create("syzkaller", 0 [pid 6315] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6314] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6311] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6308] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6318] <... memfd_create resumed>) = 3 [pid 6318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6315] <... openat resumed>) = 3 [pid 6311] <... futex resumed>) = 0 [pid 6310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6308] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6315] chdir("./file1" [pid 6311] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6310] <... clone3 resumed> => {parent_tid=[6319]}, 88) = 6319 [pid 6308] <... clone3 resumed> => {parent_tid=[6320]}, 88) = 6320 [pid 6310] rt_sigprocmask(SIG_SETMASK, [], [pid 6315] <... chdir resumed>) = 0 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], [pid 6310] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6320 attached ./strace-static-x86_64: Process 6319 attached [pid 6320] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6319] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6317] <... open resumed>) = 5 [pid 6315] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6310] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6317] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] <... futex resumed>) = 0 [pid 6320] <... rseq resumed>) = 0 [pid 6319] <... rseq resumed>) = 0 [pid 6317] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6315] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6310] <... futex resumed>) = 0 [ 173.136629][ T6313] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.144828][ T6312] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.162140][ T6307] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.162820][ T6314] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.182304][ T6313] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6308] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6318] <... write resumed>) = 524288 [pid 6320] set_robust_list(0x7eff81eac9a0, 24 [pid 6319] set_robust_list(0x7eff81eac9a0, 24 [pid 6315] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6320] <... set_robust_list resumed>) = 0 [pid 6319] <... set_robust_list resumed>) = 0 [pid 6315] <... futex resumed>) = 1 [pid 6309] <... futex resumed>) = 0 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], [pid 6309] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] rt_sigprocmask(SIG_SETMASK, [], [pid 6315] creat("./file0", 000 [pid 6309] <... futex resumed>) = 0 [pid 6309] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6318] munmap(0x7eff79a00000, 138412032) = 0 [pid 6318] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] <... creat resumed>) = 4 [pid 6320] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6319] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6315] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6309] <... futex resumed>) = 0 [pid 6318] <... openat resumed>) = 4 [pid 6309] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] ioctl(4, LOOP_SET_FD, 3 [pid 6309] <... futex resumed>) = 0 [pid 6320] <... open resumed>) = 5 [pid 6315] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 173.190146][ T6312] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.203353][ T6307] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.210674][ T6307] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.214830][ T6313] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.229944][ T6318] loop2: detected capacity change from 0 to 1024 [pid 6309] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6320] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6311] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] <... futex resumed>) = 0 [pid 6311] <... futex resumed>) = 0 [pid 6320] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6318] <... ioctl resumed>) = 0 [pid 6318] close(3 [pid 6307] <... write resumed>) = 53248 [pid 6318] <... close resumed>) = 0 [pid 6307] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] close(4 [pid 6311] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6307] <... futex resumed>) = 0 [pid 6318] <... close resumed>) = 0 [pid 6311] <... mprotect resumed>) = 0 [pid 6307] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6305] exit_group(0 [pid 6318] mkdir("./file1", 0777 [pid 6317] <... futex resumed>) = ? [pid 6311] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6307] <... futex resumed>) = ? [pid 6305] <... exit_group resumed>) = ? [pid 6318] <... mkdir resumed>) = 0 [pid 6317] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ [pid 6305] +++ exited with 0 +++ [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6305, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6311] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6318] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 173.233609][ T6314] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.247850][ T6312] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.264159][ T6315] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.271568][ T6313] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.279707][ T6314] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 6321 attached [pid 6309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] getdents64(3, [pid 6321] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6318] <... mount resumed>) = 0 [pid 6311] <... clone3 resumed> => {parent_tid=[6321]}, 88) = 6321 [pid 6309] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6321] <... rseq resumed>) = 0 [pid 6309] <... futex resumed>) = 0 [pid 5076] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6309] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6309] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6321] set_robust_list(0x7eff81eac9a0, 24 [pid 6318] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6309] <... mprotect resumed>) = 0 [pid 5076] unlink("./67/binderfs" [pid 6321] <... set_robust_list resumed>) = 0 [pid 6318] <... openat resumed>) = 3 [pid 6319] <... open resumed>) = 5 [pid 6311] rt_sigprocmask(SIG_SETMASK, [], [pid 6309] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6309] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6321] rt_sigprocmask(SIG_SETMASK, [], [pid 6309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6318] chdir("./file1" [pid 6321] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] <... chdir resumed>) = 0 [pid 6309] <... clone3 resumed> => {parent_tid=[6322]}, 88) = 6322 ./strace-static-x86_64: Process 6322 attached [pid 6319] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6318] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6313] <... write resumed>) = 53248 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6309] rt_sigprocmask(SIG_SETMASK, [], [pid 6322] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6318] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6309] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... rseq resumed>) = 0 [pid 6319] <... futex resumed>) = 0 [pid 6318] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] <... write resumed>) = 53248 [pid 6311] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6309] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6322] set_robust_list(0x7eff81eac9a0, 24 [pid 6319] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] <... futex resumed>) = 1 [pid 6316] <... futex resumed>) = 0 [ 173.292563][ T6312] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.299932][ T6315] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.312656][ T6314] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.327520][ T6315] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6309] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... set_robust_list resumed>) = 0 [pid 6318] creat("./file0", 000 [pid 6316] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] <... futex resumed>) = 0 [pid 6312] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6311] <... futex resumed>) = 1 [pid 6310] exit_group(0 [pid 6322] rt_sigprocmask(SIG_SETMASK, [], [pid 6319] <... futex resumed>) = ? [pid 6318] <... creat resumed>) = 4 [pid 6316] <... futex resumed>) = 0 [pid 6312] <... futex resumed>) = 0 [pid 6311] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6310] <... exit_group resumed>) = ? [pid 6308] exit_group(0 [pid 6322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6321] <... futex resumed>) = 0 [pid 6320] <... futex resumed>) = ? [pid 6319] +++ exited with 0 +++ [pid 6318] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6316] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6313] +++ exited with 0 +++ [pid 6310] +++ exited with 0 +++ [pid 6308] <... exit_group resumed>) = ? [pid 6322] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6321] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6318] <... futex resumed>) = 0 [pid 6316] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6312] +++ exited with 0 +++ [pid 6320] +++ exited with 0 +++ [pid 6318] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6316] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] +++ exited with 0 +++ [pid 5076] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6316] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] newfstatat(AT_FDCWD, "./67/file1", [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6308, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 3 [pid 5076] <... openat resumed>) = 4 [pid 5075] newfstatat(3, "", [pid 5072] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5072] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(4, [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5076] getdents64(4, [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [ 173.341013][ T6314] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.374499][ T6318] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] newfstatat(AT_FDCWD, "./67/binderfs", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] unlink("./67/binderfs" [pid 5072] getdents64(3, [pid 6309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] rmdir("./67/file1" [pid 5075] <... unlink resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... close resumed>) = 0 [pid 5072] unlink("./67/binderfs" [pid 5076] rmdir("./67" [pid 5072] <... unlink resumed>) = 0 [pid 6316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6316] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6316] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6323]}, 88) = 6323 [pid 6321] <... open resumed>) = 5 [pid 6316] rt_sigprocmask(SIG_SETMASK, [], [pid 6321] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6321] <... futex resumed>) = 0 [pid 6316] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6314] <... write resumed>) = 53248 [pid 6321] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] <... futex resumed>) = 0 [pid 6316] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6323 attached [pid 6323] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6314] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] <... rseq resumed>) = 0 [ 173.386676][ T6314] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.394769][ T6315] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.418475][ T6318] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6322] <... open resumed>) = 5 [pid 6314] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] mkdir("./68", 0777 [pid 6323] set_robust_list(0x7eff81eac9a0, 24 [pid 6322] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6311] exit_group(0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6323] <... set_robust_list resumed>) = 0 [pid 6322] <... futex resumed>) = 0 [pid 6321] <... futex resumed>) = ? [pid 6314] <... futex resumed>) = ? [pid 6311] <... exit_group resumed>) = ? [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] rt_sigprocmask(SIG_SETMASK, [], [pid 6322] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... openat resumed>) = 3 [pid 6323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6323] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6321] +++ exited with 0 +++ [pid 6314] +++ exited with 0 +++ [pid 6311] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6311, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5071] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5075] newfstatat(AT_FDCWD, "./67/file1", [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(3, [pid 6316] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 173.449491][ T6315] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.457992][ T6318] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.471895][ T6315] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.482542][ T6318] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] newfstatat(AT_FDCWD, "./69/binderfs", [pid 6323] <... open resumed>) = 5 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6323] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] <... write resumed>) = 53248 [pid 5075] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 6315] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] <... futex resumed>) = 0 [pid 6309] exit_group(0 [pid 6322] <... futex resumed>) = ? [pid 6309] <... exit_group resumed>) = ? [pid 6322] +++ exited with 0 +++ [pid 6323] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] unlink("./69/binderfs" [pid 6315] <... futex resumed>) = ? [pid 5076] <... ioctl resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 6315] +++ exited with 0 +++ [pid 6309] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 4 [pid 5072] newfstatat(AT_FDCWD, "./67/file1", [pid 5071] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6309, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5074] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5072] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] <... close resumed>) = 0 [pid 5075] close(4 [pid 5074] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(4, "", [pid 6318] <... write resumed>) = 53248 [pid 5075] rmdir("./67/file1" [pid 5074] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5071] <... umount2 resumed>) = 0 [pid 6318] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] unlink("./68/binderfs" [pid 6318] <... futex resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5072] getdents64(4, [pid 5071] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6318] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6316] exit_group(0 [pid 5074] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] <... futex resumed>) = ? [pid 6318] <... futex resumed>) = ? [pid 6316] <... exit_group resumed>) = ? [pid 5075] getdents64(3, [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6324 attached [pid 6323] +++ exited with 0 +++ [pid 6318] +++ exited with 0 +++ [pid 6316] +++ exited with 0 +++ [ 173.498402][ T6318] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.506014][ T6318] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./69/file1", [pid 6324] set_robust_list(0x5555571ca6a0, 24 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6324 [pid 6324] <... set_robust_list resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6316, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6324] chdir("./68" [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6324] <... chdir resumed>) = 0 [pid 5072] close(4 [pid 5071] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] <... prctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", [pid 6324] setpgid(0, 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 6324] <... setpgid resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./68/binderfs" [pid 6324] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] rmdir("./67/file1" [pid 5071] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] close(3 [pid 6324] write(3, "1000", 4 [pid 5071] <... openat resumed>) = 4 [pid 6324] <... write resumed>) = 4 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6324] close(3 [pid 5075] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] rmdir("./67" [pid 5072] getdents64(3, [pid 6324] <... close resumed>) = 0 [pid 6324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(4, [pid 5072] close(3 [pid 5075] mkdir("./68", 0777 [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6324] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] rmdir("./67" [pid 5071] getdents64(4, [pid 6324] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6324] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 5071] close(4 [pid 5072] mkdir("./68", 0777 [pid 6324] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5071] <... close resumed>) = 0 [pid 6324] <... mprotect resumed>) = 0 [pid 6324] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] <... mkdir resumed>) = 0 [pid 5071] rmdir("./69/file1" [pid 5074] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6324] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6325 attached [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] getdents64(3, [pid 6325] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 5074] newfstatat(AT_FDCWD, "./68/file1", [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6325] <... rseq resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] close(3 [pid 6325] set_robust_list(0x7eff81ecd9a0, 24 [pid 5074] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 6325] <... set_robust_list resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./69" [pid 6325] rt_sigprocmask(SIG_SETMASK, [], [pid 6324] <... clone3 resumed> => {parent_tid=[6325]}, 88) = 6325 [pid 5074] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 6325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5071] mkdir("./70", 0777 [pid 6325] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] newfstatat(4, "", [pid 5071] <... mkdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] getdents64(4, [pid 6324] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6325] <... futex resumed>) = 0 [pid 6324] <... futex resumed>) = 1 [pid 5074] close(4 [pid 6325] memfd_create("syzkaller", 0 [pid 6324] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./68/file1") = 0 [pid 5073] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(3, [pid 6325] <... memfd_create resumed>) = 3 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] close(3 [pid 6325] <... mmap resumed>) = 0x7eff79a00000 [pid 5074] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./68" [pid 5073] newfstatat(AT_FDCWD, "./68/file1", [pid 6325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... rmdir resumed>) = 0 [pid 5074] mkdir("./69", 0777) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./68/file1") = 0 [pid 6325] <... write resumed>) = 524288 [pid 5073] getdents64(3, [pid 6325] munmap(0x7eff79a00000, 138412032 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6325] <... munmap resumed>) = 0 [pid 5073] close(3) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 6325] <... openat resumed>) = 4 [pid 5071] <... ioctl resumed>) = 0 [pid 6325] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5073] rmdir("./68") = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5073] mkdir("./69", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] close(3 [pid 5071] close(3 [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6326 [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6326 attached [pid 6326] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6326] chdir("./68"./strace-static-x86_64: Process 6327 attached ./strace-static-x86_64: Process 6328 attached [pid 6325] close(3 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6327 [pid 6328] set_robust_list(0x5555571ca6a0, 24 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6328 ./strace-static-x86_64: Process 6329 attached [pid 6329] set_robust_list(0x5555571ca6a0, 24 [pid 6328] <... set_robust_list resumed>) = 0 [pid 6326] <... chdir resumed>) = 0 [pid 6325] <... close resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6329 [pid 6326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6325] close(4 [pid 6328] chdir("./69" [pid 6325] <... close resumed>) = 0 [pid 6327] set_robust_list(0x5555571ca6a0, 24 [pid 6329] <... set_robust_list resumed>) = 0 [pid 6326] <... prctl resumed>) = 0 [pid 6325] mkdir("./file1", 0777 [pid 6329] chdir("./70" [pid 6327] <... set_robust_list resumed>) = 0 [pid 6328] <... chdir resumed>) = 0 [pid 6326] setpgid(0, 0 [pid 6325] <... mkdir resumed>) = 0 [ 173.672318][ T6325] loop5: detected capacity change from 0 to 1024 [pid 6329] <... chdir resumed>) = 0 [pid 6327] chdir("./68" [pid 6326] <... setpgid resumed>) = 0 [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6325] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6327] <... chdir resumed>) = 0 [pid 6326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6328] <... prctl resumed>) = 0 [pid 6328] setpgid(0, 0 [pid 6327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6328] <... setpgid resumed>) = 0 [pid 6329] <... prctl resumed>) = 0 [pid 6327] <... prctl resumed>) = 0 [pid 6326] <... openat resumed>) = 3 [pid 6329] setpgid(0, 0 [pid 6327] setpgid(0, 0 [pid 6328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6326] write(3, "1000", 4 [pid 6329] <... setpgid resumed>) = 0 [pid 6327] <... setpgid resumed>) = 0 [pid 6328] <... openat resumed>) = 3 [pid 6326] <... write resumed>) = 4 [pid 6325] <... mount resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6326] close(3 [pid 6325] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6329] <... openat resumed>) = 3 [pid 6327] <... openat resumed>) = 3 [pid 6328] write(3, "1000", 4 [pid 6326] <... close resumed>) = 0 [pid 6325] <... openat resumed>) = 3 [pid 5073] <... ioctl resumed>) = 0 [pid 6329] write(3, "1000", 4 [pid 6325] chdir("./file1" [pid 6328] <... write resumed>) = 4 [pid 6329] <... write resumed>) = 4 [pid 6329] close(3 [pid 6328] close(3 [pid 6329] <... close resumed>) = 0 [pid 6328] <... close resumed>) = 0 [pid 6329] symlink("/dev/binderfs", "./binderfs" [pid 6328] symlink("/dev/binderfs", "./binderfs" [pid 6327] write(3, "1000", 4 [pid 6326] symlink("/dev/binderfs", "./binderfs" [pid 6325] <... chdir resumed>) = 0 [pid 6329] <... symlink resumed>) = 0 [pid 6327] <... write resumed>) = 4 [pid 6328] <... symlink resumed>) = 0 [pid 6326] <... symlink resumed>) = 0 [pid 6325] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6327] close(3 [pid 6326] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6329] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... close resumed>) = 0 [pid 6328] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = 0 [pid 6329] <... futex resumed>) = 0 [pid 6327] symlink("/dev/binderfs", "./binderfs" [pid 6328] <... futex resumed>) = 0 [pid 6326] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6325] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6327] <... symlink resumed>) = 0 [pid 6328] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6326] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6325] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6329] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6327] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6325] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6327] <... futex resumed>) = 0 [pid 6328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] close(3 [pid 6329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6327] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6325] creat("./file0", 000 [pid 6324] <... futex resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6327] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6326] <... mmap resumed>) = 0x7eff81ead000 [pid 6325] <... creat resumed>) = 4 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6329] <... mmap resumed>) = 0x7eff81ead000 [pid 6327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6328] <... mmap resumed>) = 0x7eff81ead000 [pid 6326] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6325] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6328] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6326] <... mprotect resumed>) = 0 [pid 6325] <... futex resumed>) = 0 [pid 6324] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... mprotect resumed>) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6327] <... mmap resumed>) = 0x7eff81ead000 [pid 6328] <... mprotect resumed>) = 0 [pid 6326] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6325] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6324] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6327] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6328] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6326] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6324] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6330 attached [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6327] <... mprotect resumed>) = 0 [pid 6326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6332 attached [pid 6330] set_robust_list(0x5555571ca6a0, 24 [pid 6327] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6324] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6330 [pid 6332] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6330] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6331 attached [pid 6332] <... rseq resumed>) = 0 [pid 6330] chdir("./69" [pid 6329] <... clone3 resumed> => {parent_tid=[6331]}, 88) = 6331 [pid 6327] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6328] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6326] <... clone3 resumed> => {parent_tid=[6332]}, 88) = 6332 [pid 6332] set_robust_list(0x7eff81ecd9a0, 24 [pid 6331] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6330] <... chdir resumed>) = 0 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], [pid 6327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6326] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6333 attached [pid 6332] <... set_robust_list resumed>) = 0 [pid 6330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6333] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6332] rt_sigprocmask(SIG_SETMASK, [], [pid 6326] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] <... rseq resumed>) = 0 [pid 6332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6330] <... prctl resumed>) = 0 [pid 6327] <... clone3 resumed> => {parent_tid=[6333]}, 88) = 6333 [pid 6326] <... futex resumed>) = 0 [pid 6333] set_robust_list(0x7eff81ecd9a0, 24 [pid 6332] memfd_create("syzkaller", 0 [pid 6330] setpgid(0, 0 [pid 6327] rt_sigprocmask(SIG_SETMASK, [], [pid 6326] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6333] <... set_robust_list resumed>) = 0 [pid 6330] <... setpgid resumed>) = 0 [pid 6327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6333] rt_sigprocmask(SIG_SETMASK, [], [pid 6332] <... memfd_create resumed>) = 3 [pid 6329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6331] <... rseq resumed>) = 0 [pid 6329] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] <... mmap resumed>) = 0x7eff79a00000 [pid 6331] set_robust_list(0x7eff81ecd9a0, 24 [pid 6330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6329] <... futex resumed>) = 0 [pid 6327] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6334 attached [pid 6333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6331] <... set_robust_list resumed>) = 0 [pid 6330] <... openat resumed>) = 3 [pid 6329] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6327] <... futex resumed>) = 0 [pid 6328] <... clone3 resumed> => {parent_tid=[6334]}, 88) = 6334 [pid 6333] memfd_create("syzkaller", 0 [pid 6328] rt_sigprocmask(SIG_SETMASK, [], [pid 6331] rt_sigprocmask(SIG_SETMASK, [], [pid 6328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6334] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6328] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] <... memfd_create resumed>) = 3 [pid 6331] memfd_create("syzkaller", 0 [pid 6327] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6328] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6331] <... memfd_create resumed>) = 3 [pid 6333] <... mmap resumed>) = 0x7eff79a00000 [pid 6331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6330] write(3, "1000", 4 [pid 6334] <... rseq resumed>) = 0 [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6331] <... mmap resumed>) = 0x7eff79a00000 [pid 6330] <... write resumed>) = 4 [pid 6334] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6332] <... write resumed>) = 524288 [pid 6331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6330] close(3) = 0 [pid 6330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6330] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6334] rt_sigprocmask(SIG_SETMASK, [], [pid 6330] <... mmap resumed>) = 0x7eff81ead000 [pid 6334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6330] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6324] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] memfd_create("syzkaller", 0 [pid 6324] <... futex resumed>) = 0 [pid 6324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6330] <... mprotect resumed>) = 0 [pid 6334] <... memfd_create resumed>) = 3 [pid 6324] <... mmap resumed>) = 0x7eff81e8c000 [pid 6324] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6330] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6324] <... mprotect resumed>) = 0 [pid 6334] <... mmap resumed>) = 0x7eff79a00000 [pid 6330] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6324] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6335]}, 88) = 6335 [pid 6330] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6335 attached NULL, 8) = 0 [ 173.800183][ T6325] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.836825][ T6325] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6335] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6332] munmap(0x7eff79a00000, 138412032 [pid 6330] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6333] <... write resumed>) = 524288 [pid 6324] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6330] <... futex resumed>) = 0 [pid 6335] <... rseq resumed>) = 0 [pid 6330] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6335] set_robust_list(0x7eff81ecd9a0, 24 [pid 6333] munmap(0x7eff79a00000, 138412032 [pid 6332] <... munmap resumed>) = 0 [pid 6333] <... munmap resumed>) = 0 [pid 6335] <... set_robust_list resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6332] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6335] rt_sigprocmask(SIG_SETMASK, [], [pid 6333] <... openat resumed>) = 4 [pid 6335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6333] ioctl(4, LOOP_SET_FD, 3 [pid 6332] <... openat resumed>) = 4 [pid 6324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6335] memfd_create("syzkaller", 0 [pid 6331] <... write resumed>) = 524288 ./strace-static-x86_64: Process 6336 attached [pid 6335] <... memfd_create resumed>) = 3 [pid 6336] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6331] munmap(0x7eff79a00000, 138412032 [pid 6324] <... clone3 resumed> => {parent_tid=[6336]}, 88) = 6336 [pid 6336] <... rseq resumed>) = 0 [pid 6335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], [pid 6336] set_robust_list(0x7eff81eac9a0, 24 [pid 6335] <... mmap resumed>) = 0x7eff79a00000 [pid 6331] <... munmap resumed>) = 0 [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6336] <... set_robust_list resumed>) = 0 [pid 6331] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6324] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6336] rt_sigprocmask(SIG_SETMASK, [], [pid 6331] <... openat resumed>) = 4 [pid 6324] <... futex resumed>) = 0 [pid 6336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] ioctl(4, LOOP_SET_FD, 3 [pid 6324] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... write resumed>) = 524288 [pid 6333] <... ioctl resumed>) = 0 [pid 6336] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6333] close(3) = 0 [ 173.871096][ T6325] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.881175][ T6333] loop4: detected capacity change from 0 to 1024 [ 173.895211][ T6332] loop1: detected capacity change from 0 to 1024 [ 173.899986][ T6325] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.914236][ T6331] loop0: detected capacity change from 0 to 1024 [pid 6333] close(4) = 0 [pid 6331] <... ioctl resumed>) = 0 [pid 6334] munmap(0x7eff79a00000, 138412032 [pid 6332] <... ioctl resumed>) = 0 [pid 6334] <... munmap resumed>) = 0 [pid 6332] close(3 [pid 6333] mkdir("./file1", 0777) = 0 [pid 6331] close(3 [pid 6332] <... close resumed>) = 0 [pid 6331] <... close resumed>) = 0 [pid 6333] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6332] close(4 [pid 6331] close(4 [pid 6324] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6332] <... close resumed>) = 0 [ 173.925078][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 173.925097][ T28] audit: type=1800 audit(1708423251.545:414): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 173.945225][ T6325] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6334] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6332] mkdir("./file1", 0777 [pid 6334] <... openat resumed>) = 4 [pid 6332] <... mkdir resumed>) = 0 [pid 6335] <... write resumed>) = 524288 [pid 6334] ioctl(4, LOOP_SET_FD, 3 [pid 6331] <... close resumed>) = 0 [pid 6331] mkdir("./file1", 0777 [pid 6332] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6331] <... mkdir resumed>) = 0 [pid 6335] munmap(0x7eff79a00000, 138412032) = 0 [pid 6331] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6333] <... mount resumed>) = 0 [pid 6333] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6335] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6333] chdir("./file1" [pid 6335] <... openat resumed>) = 4 [pid 6333] <... chdir resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6335] ioctl(4, LOOP_SET_FD, 3 [pid 6333] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6334] <... ioctl resumed>) = 0 [pid 6334] close(3) = 0 [pid 6334] close(4) = 0 [pid 6334] mkdir("./file1", 0777) = 0 [pid 6333] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6333] <... futex resumed>) = 1 [pid 6331] <... mount resumed>) = 0 [pid 6333] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] <... mount resumed>) = 0 [pid 6331] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6327] <... futex resumed>) = 0 [pid 6332] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6331] <... openat resumed>) = 3 [pid 6327] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] <... futex resumed>) = 0 [pid 6332] <... openat resumed>) = 3 [pid 6331] chdir("./file1" [pid 6327] <... futex resumed>) = 1 [pid 6333] creat("./file0", 000 [pid 6332] chdir("./file1" [pid 6331] <... chdir resumed>) = 0 [pid 6327] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... creat resumed>) = 4 [pid 6332] <... chdir resumed>) = 0 [pid 6331] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6335] <... ioctl resumed>) = 0 [pid 6334] <... mount resumed>) = 0 [pid 6333] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6331] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6336] <... open resumed>) = 5 [pid 6336] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] close(3 [pid 6333] <... futex resumed>) = 1 [pid 6332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6331] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... futex resumed>) = 0 [pid 6325] <... write resumed>) = 53248 [pid 6336] <... futex resumed>) = 0 [pid 6335] <... close resumed>) = 0 [ 173.971304][ T6325] hfsplus: request for non-existent node 16777216 in B*Tree [ 173.981399][ T6334] loop3: detected capacity change from 0 to 1024 [ 174.006943][ T6335] loop2: detected capacity change from 0 to 1024 [pid 6334] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6333] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6332] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6327] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6336] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6335] close(4 [pid 6333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6332] <... futex resumed>) = 1 [pid 6329] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... futex resumed>) = 0 [pid 6333] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6332] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] <... futex resumed>) = 0 [pid 6327] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 0 [pid 6324] exit_group(0 [pid 6336] <... futex resumed>) = ? [pid 6335] <... close resumed>) = 0 [pid 6334] <... openat resumed>) = 3 [pid 6331] creat("./file0", 000 [pid 6329] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6324] <... exit_group resumed>) = ? [pid 6336] +++ exited with 0 +++ [pid 6335] mkdir("./file1", 0777 [pid 6331] <... creat resumed>) = 4 [pid 6326] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] <... futex resumed>) = ? [pid 6335] <... mkdir resumed>) = 0 [pid 6334] chdir("./file1" [pid 6332] <... futex resumed>) = 0 [pid 6331] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = 1 [pid 6332] creat("./file0", 000 [pid 6326] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... chdir resumed>) = 0 [pid 6332] <... creat resumed>) = 4 [pid 6334] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6335] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6334] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6332] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... futex resumed>) = 1 [pid 6331] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6326] <... futex resumed>) = 0 [pid 6334] <... futex resumed>) = 1 [pid 6331] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6329] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] <... futex resumed>) = 0 [pid 6334] creat("./file0", 000 [pid 6329] <... futex resumed>) = 0 [pid 6328] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = 0 [pid 6334] <... creat resumed>) = 4 [pid 6332] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6329] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6328] <... futex resumed>) = 0 [pid 6326] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6328] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6328] <... futex resumed>) = 0 [pid 6334] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6328] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6325] +++ exited with 0 +++ [pid 6324] +++ exited with 0 +++ [pid 6327] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 174.064800][ T6333] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.090530][ T6331] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.094387][ T6333] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6335] <... mount resumed>) = 0 [pid 6327] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6327] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 6327] <... clone3 resumed> => {parent_tid=[6337]}, 88) = 6337 [pid 6327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6327] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6328] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 6326] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] <... futex resumed>) = 0 [pid 6328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6326] <... futex resumed>) = 0 [pid 6327] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6328] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6326] <... mmap resumed>) = 0x7eff81e8c000 ./strace-static-x86_64: Process 6337 attached [pid 6335] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6328] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6329] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6335] <... openat resumed>) = 3 [pid 6329] <... futex resumed>) = 0 [pid 6328] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6326] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6337] <... rseq resumed>) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6328] <... mprotect resumed>) = 0 [pid 6326] <... mprotect resumed>) = 0 [pid 5076] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6337] set_robust_list(0x7eff81eac9a0, 24 [pid 6335] chdir("./file1" [pid 6329] <... mmap resumed>) = 0x7eff81e8c000 [pid 6328] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6326] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6337] <... set_robust_list resumed>) = 0 [pid 6335] <... chdir resumed>) = 0 [pid 6329] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6328] <... rt_sigprocmask resumed>[], 8) = 0 [ 174.112836][ T6331] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.117713][ T6332] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.122437][ T6331] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.140722][ T6334] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6326] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6337] rt_sigprocmask(SIG_SETMASK, [], [pid 6335] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6329] <... mprotect resumed>) = 0 [pid 6328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6338 attached [pid 6337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6335] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6327] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6338] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6337] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6335] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6328] <... clone3 resumed> => {parent_tid=[6338]}, 88) = 6338 [pid 5076] unlink("./68/binderfs" [pid 6335] <... futex resumed>) = 1 [pid 6328] rt_sigprocmask(SIG_SETMASK, [], [pid 6338] <... rseq resumed>) = 0 [pid 6335] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6326] <... clone3 resumed> => {parent_tid=[6339]}, 88) = 6339 [pid 5076] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6340 attached [pid 6338] set_robust_list(0x7eff81eac9a0, 24 [pid 6328] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6338] <... set_robust_list resumed>) = 0 [pid 6329] <... clone3 resumed> => {parent_tid=[6340]}, 88) = 6340 [pid 6328] <... futex resumed>) = 0 [pid 6326] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 174.163020][ T6333] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.170341][ T6333] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.172084][ T6334] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.178440][ T6332] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.185629][ T6331] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6340] <... rseq resumed>) = 0 [pid 6328] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] rt_sigprocmask(SIG_SETMASK, [], [pid 6330] <... futex resumed>) = 0 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6339 attached [pid 6339] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6330] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = 0 [pid 6339] <... rseq resumed>) = 0 [pid 6335] <... futex resumed>) = 0 [pid 6330] <... futex resumed>) = 1 [pid 6326] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6335] creat("./file0", 000 [pid 6329] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6340] set_robust_list(0x7eff81eac9a0, 24 [pid 6339] set_robust_list(0x7eff81eac9a0, 24 [pid 6330] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6339] <... set_robust_list resumed>) = 0 [pid 6339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6340] <... set_robust_list resumed>) = 0 [pid 6339] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6335] <... creat resumed>) = 4 [pid 6329] <... futex resumed>) = 0 [pid 6340] rt_sigprocmask(SIG_SETMASK, [], [pid 6335] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6335] <... futex resumed>) = 1 [pid 6330] <... futex resumed>) = 0 [ 174.208699][ T28] audit: type=1800 audit(1708423251.815:415): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 174.236281][ T6332] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.247694][ T6331] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.249700][ T6333] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6330] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6340] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6335] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6328] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6330] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6330] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6330] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 174.262901][ T6334] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.266195][ T6332] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.270998][ T6334] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.294711][ T6335] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6341]}, 88) = 6341 [pid 6330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6330] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6341 attached [pid 6339] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = 0 [pid 6341] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6339] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] <... rseq resumed>) = 0 [pid 6339] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] set_robust_list(0x7eff81eac9a0, 24 [pid 6339] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] newfstatat(AT_FDCWD, "./68/file1", [pid 6341] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6341] rt_sigprocmask(SIG_SETMASK, [], [pid 6340] <... open resumed>) = 5 [pid 6338] <... open resumed>) = 5 [pid 6331] <... write resumed>) = 53248 [pid 6329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] <... open resumed>) = 5 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6337] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6337] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6337] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6340] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 6340] <... futex resumed>) = 0 [pid 6338] <... futex resumed>) = 0 [pid 6331] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6340] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6338] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6331] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] exit_group(0 [pid 5076] getdents64(4, [pid 6340] <... futex resumed>) = ? [pid 6331] <... futex resumed>) = ? [pid 6329] <... exit_group resumed>) = ? [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6340] +++ exited with 0 +++ [pid 5076] close(4) = 0 [pid 5076] rmdir("./68/file1") = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6333] <... write resumed>) = 53248 [pid 6331] +++ exited with 0 +++ [pid 6329] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 6333] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6327] exit_group(0 [pid 5076] rmdir("./68" [pid 6337] <... futex resumed>) = ? [pid 6333] <... futex resumed>) = ? [pid 6327] <... exit_group resumed>) = ? [pid 6337] +++ exited with 0 +++ [pid 6333] +++ exited with 0 +++ [pid 6330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6327] +++ exited with 0 +++ [pid 5076] <... rmdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] mkdir("./69", 0777 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6327, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5076] <... mkdir resumed>) = 0 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [ 174.297131][ T28] audit: type=1800 audit(1708423251.855:416): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 174.311827][ T6335] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.334100][ T6331] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.343362][ T6333] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.343706][ T6332] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.357372][ T6334] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5075] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... restart_syscall resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 174.406916][ T6334] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.409016][ T28] audit: type=1800 audit(1708423251.865:417): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 174.417049][ T6335] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... ioctl resumed>) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6334] <... write resumed>) = 53248 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6334] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6342 [pid 6334] <... futex resumed>) = 0 [pid 6334] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6342 attached [pid 5075] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 6328] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6342] set_robust_list(0x5555571ca6a0, 24 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6334] <... futex resumed>) = ? [pid 6328] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6338] <... futex resumed>) = ? [pid 5071] getdents64(3, [pid 6342] <... set_robust_list resumed>) = 0 [pid 6338] +++ exited with 0 +++ [pid 6334] +++ exited with 0 +++ [pid 6342] chdir("./69") = 0 [pid 5075] unlink("./68/binderfs" [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... unlink resumed>) = 0 [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... prctl resumed>) = 0 [pid 6332] <... write resumed>) = 53248 [pid 5075] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6342] setpgid(0, 0 [pid 6332] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] exit_group(0 [pid 6332] <... futex resumed>) = 0 [pid 6332] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6342] <... setpgid resumed>) = 0 [pid 6339] <... futex resumed>) = ? [pid 6332] <... futex resumed>) = ? [pid 6326] <... exit_group resumed>) = ? [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6339] +++ exited with 0 +++ [pid 6332] +++ exited with 0 +++ [ 174.436927][ T28] audit: type=1800 audit(1708423251.905:418): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 174.445640][ T6332] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.465229][ T28] audit: type=1800 audit(1708423251.985:419): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6328] +++ exited with 0 +++ [pid 6326] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5071] unlink("./70/binderfs" [pid 6342] <... openat resumed>) = 3 [pid 5075] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6328, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6326, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6342] write(3, "1000", 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... unlink resumed>) = 0 [pid 6342] <... write resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./68/file1", [pid 6342] close(3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] <... close resumed>) = 0 [pid 5075] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] symlink("/dev/binderfs", "./binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6342] <... symlink resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 [pid 6342] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 4 [pid 5074] newfstatat(3, "", [pid 5075] newfstatat(4, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(3, "", [pid 5071] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] <... futex resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6342] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] newfstatat(AT_FDCWD, "./70/file1", [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6341] <... open resumed>) = 5 [pid 5075] <... close resumed>) = 0 [pid 5074] unlink("./69/binderfs" [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6342] <... mmap resumed>) = 0x7eff81ead000 [pid 6341] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./68/file1" [pid 5074] <... unlink resumed>) = 0 [pid 5072] unlink("./68/binderfs" [pid 6341] <... futex resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 [pid 6341] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./68") = 0 [pid 5075] mkdir("./69", 0777 [pid 6342] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... mkdir resumed>) = 0 [pid 6342] <... mprotect resumed>) = 0 [pid 6342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5075] <... openat resumed>) = 3 [pid 6342] <... clone3 resumed> => {parent_tid=[6343]}, 88) = 6343 [pid 6342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6343 attached [pid 6343] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6342] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6342] <... futex resumed>) = 0 [pid 6342] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6343] set_robust_list(0x7eff81ecd9a0, 24 [pid 6335] <... write resumed>) = 53248 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6335] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] <... set_robust_list resumed>) = 0 [pid 6335] <... futex resumed>) = 0 [pid 5074] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 4 [pid 6343] rt_sigprocmask(SIG_SETMASK, [], [pid 6335] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6330] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6341] <... futex resumed>) = ? [pid 6335] <... futex resumed>) = ? [pid 6330] <... exit_group resumed>) = ? [pid 5071] newfstatat(4, "", [pid 6341] +++ exited with 0 +++ [pid 6335] +++ exited with 0 +++ [pid 6343] memfd_create("syzkaller", 0 [ 174.559628][ T6335] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.588877][ T6335] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.598757][ T6335] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] newfstatat(AT_FDCWD, "./69/file1", [pid 5072] newfstatat(AT_FDCWD, "./68/file1", [pid 6343] <... memfd_create resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] getdents64(4, [pid 6343] <... mmap resumed>) = 0x7eff79a00000 [pid 6330] +++ exited with 0 +++ [pid 5074] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6330, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 5072] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 4 [pid 5071] close(4 [pid 5074] newfstatat(4, "", [pid 5073] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 5071] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] rmdir("./70/file1" [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(4, [pid 5071] <... rmdir resumed>) = 0 [pid 5074] getdents64(4, [pid 5071] getdents64(3, [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5073] newfstatat(3, "", [pid 5072] getdents64(4, [pid 5071] close(3 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./69/file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 6343] <... write resumed>) = 524288 [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] close(4 [pid 5071] rmdir("./70" [pid 6343] munmap(0x7eff79a00000, 138412032 [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5073] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] rmdir("./68/file1" [pid 5071] mkdir("./71", 0777 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6343] <... munmap resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] close(3 [pid 5073] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5072] getdents64(3, [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 6343] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] rmdir("./69" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6343] <... openat resumed>) = 4 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] unlink("./69/binderfs" [pid 5072] close(3 [pid 6343] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5072] rmdir("./68" [pid 5074] mkdir("./70", 0777 [pid 5073] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6344 attached [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6344] set_robust_list(0x5555571ca6a0, 24 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6344 [pid 5072] mkdir("./69", 0777 [pid 6344] <... set_robust_list resumed>) = 0 [pid 6344] chdir("./69" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 6344] <... chdir resumed>) = 0 [pid 6344] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 6344] <... prctl resumed>) = 0 [pid 6344] setpgid(0, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6344] <... setpgid resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6344] <... openat resumed>) = 3 [pid 6343] <... ioctl resumed>) = 0 [pid 5073] getdents64(4, [pid 6344] write(3, "1000", 4 [pid 6343] close(3 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6344] <... write resumed>) = 4 [pid 6343] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 6344] close(3 [pid 6343] close(4 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6344] <... close resumed>) = 0 [pid 6343] <... close resumed>) = 0 [pid 5073] close(4 [pid 5071] <... ioctl resumed>) = 0 [pid 6344] symlink("/dev/binderfs", "./binderfs" [pid 6343] mkdir("./file1", 0777 [pid 5073] <... close resumed>) = 0 [pid 6344] <... symlink resumed>) = 0 [pid 6344] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] rmdir("./69/file1" [pid 6344] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6343] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] close(3 [pid 6343] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6344] <... mmap resumed>) = 0x7eff81ead000 [ 174.707370][ T6343] loop5: detected capacity change from 0 to 1024 [pid 6344] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5073] close(3 [pid 6344] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./69" [pid 6344] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6345]}, 88) = 6345 [pid 6344] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6345 attached [pid 6344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] mkdir("./70", 0777 [pid 6344] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6344] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6345] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6345] set_robust_list(0x7eff81ecd9a0, 24 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6346 [pid 6345] <... set_robust_list resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5073] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6346 attached [pid 6345] memfd_create("syzkaller", 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6346] set_robust_list(0x5555571ca6a0, 24 [pid 6345] <... memfd_create resumed>) = 3 [pid 6346] <... set_robust_list resumed>) = 0 [pid 6345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6345] <... mmap resumed>) = 0x7eff79a00000 [pid 6346] chdir("./71" [pid 6345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6343] <... mount resumed>) = 0 [pid 5074] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5072] close(3 [pid 6346] <... chdir resumed>) = 0 [pid 6343] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6343] chdir("./file1" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6346] <... prctl resumed>) = 0 [pid 6343] <... chdir resumed>) = 0 [pid 6346] setpgid(0, 0 [pid 6343] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6346] <... setpgid resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6345] <... write resumed>) = 524288 [pid 6345] munmap(0x7eff79a00000, 138412032 [pid 6346] <... openat resumed>) = 3 [pid 6345] <... munmap resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6347 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6348 ./strace-static-x86_64: Process 6348 attached [pid 6346] write(3, "1000", 4 [pid 6343] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6348] set_robust_list(0x5555571ca6a0, 24 [pid 6346] <... write resumed>) = 4 [pid 6348] <... set_robust_list resumed>) = 0 [pid 6346] close(3) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs" [pid 6348] chdir("./69" [pid 6346] <... symlink resumed>) = 0 [pid 6343] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6347 attached [pid 6348] <... chdir resumed>) = 0 [pid 6346] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6343] <... futex resumed>) = 1 [pid 6342] <... futex resumed>) = 0 [pid 6347] set_robust_list(0x5555571ca6a0, 24 [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6346] <... futex resumed>) = 0 [pid 6345] <... openat resumed>) = 4 [pid 6347] <... set_robust_list resumed>) = 0 [pid 6348] <... prctl resumed>) = 0 [pid 6345] ioctl(4, LOOP_SET_FD, 3 [pid 6343] creat("./file0", 000 [pid 6342] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] chdir("./70" [pid 6348] setpgid(0, 0 [pid 6346] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6342] <... futex resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6347] <... chdir resumed>) = 0 [pid 6343] <... creat resumed>) = 4 [pid 6342] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] close(3 [pid 6348] <... setpgid resumed>) = 0 [pid 6346] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5073] <... close resumed>) = 0 [pid 6346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6343] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6347] <... prctl resumed>) = 0 [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6343] <... futex resumed>) = 1 [pid 6342] <... futex resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6349 ./strace-static-x86_64: Process 6349 attached [pid 6347] setpgid(0, 0 [pid 6346] <... mmap resumed>) = 0x7eff81ead000 [pid 6343] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6342] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] set_robust_list(0x5555571ca6a0, 24 [pid 6347] <... setpgid resumed>) = 0 [pid 6346] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6342] <... futex resumed>) = 0 [pid 6349] <... set_robust_list resumed>) = 0 [pid 6347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6348] <... openat resumed>) = 3 [pid 6342] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6349] chdir("./70" [pid 6347] <... openat resumed>) = 3 [ 174.858338][ T6345] loop4: detected capacity change from 0 to 1024 [ 174.895293][ T6343] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6346] <... mprotect resumed>) = 0 [pid 6348] write(3, "1000", 4 [pid 6349] <... chdir resumed>) = 0 [pid 6347] write(3, "1000", 4) = 4 [pid 6347] close(3) = 0 [pid 6347] symlink("/dev/binderfs", "./binderfs" [pid 6345] <... ioctl resumed>) = 0 [pid 6349] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6347] <... symlink resumed>) = 0 [pid 6348] <... write resumed>) = 4 [pid 6346] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6345] close(3) = 0 [pid 6348] close(3 [pid 6349] <... prctl resumed>) = 0 [pid 6346] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6349] setpgid(0, 0 [pid 6348] <... close resumed>) = 0 [pid 6346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6349] <... setpgid resumed>) = 0 [pid 6347] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6345] close(4 [pid 6347] <... futex resumed>) = 0 [pid 6347] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6345] <... close resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6347] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6348] <... symlink resumed>) = 0 [pid 6346] <... clone3 resumed> => {parent_tid=[6350]}, 88) = 6350 [pid 6345] mkdir("./file1", 0777./strace-static-x86_64: Process 6350 attached [pid 6349] <... openat resumed>) = 3 [pid 6347] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6348] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] rt_sigprocmask(SIG_SETMASK, [], [pid 6345] <... mkdir resumed>) = 0 [pid 6347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [ 174.905522][ T6343] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6350] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6349] write(3, "1000", 4 [pid 6347] <... mmap resumed>) = 0x7eff81ead000 [pid 6348] <... futex resumed>) = 0 [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6347] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6351 attached => {parent_tid=[6351]}, 88) = 6351 [pid 6351] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6347] rt_sigprocmask(SIG_SETMASK, [], [pid 6351] <... rseq resumed>) = 0 [pid 6350] <... rseq resumed>) = 0 [pid 6349] <... write resumed>) = 4 [pid 6347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6348] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6346] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] set_robust_list(0x7eff81ecd9a0, 24 [pid 6350] set_robust_list(0x7eff81ecd9a0, 24 [pid 6349] close(3 [pid 6347] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6346] <... futex resumed>) = 0 [pid 6342] <... futex resumed>) = 0 [pid 6351] <... set_robust_list resumed>) = 0 [pid 6350] <... set_robust_list resumed>) = 0 [pid 6349] <... close resumed>) = 0 [pid 6347] <... futex resumed>) = 0 [pid 6348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6346] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6351] rt_sigprocmask(SIG_SETMASK, [], [pid 6350] rt_sigprocmask(SIG_SETMASK, [], [pid 6349] symlink("/dev/binderfs", "./binderfs" [pid 6347] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] <... mmap resumed>) = 0x7eff81e8c000 [pid 6351] memfd_create("syzkaller", 0 [pid 6349] <... symlink resumed>) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6351] <... memfd_create resumed>) = 3 [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6348] <... mmap resumed>) = 0x7eff81ead000 [pid 6342] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6350] memfd_create("syzkaller", 0 [pid 6342] <... mprotect resumed>) = 0 [pid 6350] <... memfd_create resumed>) = 3 [pid 6349] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6345] <... mount resumed>) = 0 [pid 6342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6349] <... futex resumed>) = 0 [pid 6348] <... mprotect resumed>) = 0 [pid 6342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6350] <... mmap resumed>) = 0x7eff79a00000 [pid 6349] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6345] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6349] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6348] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6352 attached [pid 6349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6345] <... openat resumed>) = 3 [pid 6352] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] <... clone3 resumed> => {parent_tid=[6352]}, 88) = 6352 [pid 6352] <... rseq resumed>) = 0 [pid 6349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6348] <... clone3 resumed> => {parent_tid=[6353]}, 88) = 6353 [pid 6345] chdir("./file1" [pid 6342] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6353 attached [pid 6352] set_robust_list(0x7eff81eac9a0, 24 [pid 6349] <... mmap resumed>) = 0x7eff81ead000 [pid 6348] rt_sigprocmask(SIG_SETMASK, [], [pid 6345] <... chdir resumed>) = 0 [pid 6342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6353] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6352] <... set_robust_list resumed>) = 0 [pid 6349] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6342] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [ 174.939783][ T6343] hfsplus: request for non-existent node 16777216 in B*Tree [ 174.962352][ T6343] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6353] <... rseq resumed>) = 0 [pid 6352] rt_sigprocmask(SIG_SETMASK, [], [pid 6349] <... mprotect resumed>) = 0 [pid 6348] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6342] <... futex resumed>) = 0 [pid 6353] set_robust_list(0x7eff81ecd9a0, 24 [pid 6345] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... set_robust_list resumed>) = 0 [pid 6345] <... futex resumed>) = 1 [pid 6344] <... futex resumed>) = 0 [pid 6353] rt_sigprocmask(SIG_SETMASK, [], [pid 6345] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6344] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6344] <... futex resumed>) = 0 [pid 6353] memfd_create("syzkaller", 0 [pid 6345] creat("./file0", 000 [pid 6344] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... memfd_create resumed>) = 3 [pid 6352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6351] <... write resumed>) = 524288 [pid 6349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6348] <... futex resumed>) = 0 [pid 6345] <... creat resumed>) = 4 [pid 6342] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6352] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6348] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6353] <... mmap resumed>) = 0x7eff79a00000 [pid 6353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6345] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6344] <... futex resumed>) = 0 [pid 6344] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6344] <... futex resumed>) = 0 [pid 6351] munmap(0x7eff79a00000, 138412032 [pid 6349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6344] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] <... munmap resumed>) = 0 [pid 6353] <... write resumed>) = 524288 [ 174.997185][ T6343] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.012552][ T6343] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.024100][ T28] audit: type=1800 audit(1708423252.645:420): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6351] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6351] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6354 attached [pid 6352] <... open resumed>) = 5 [pid 6343] <... write resumed>) = 53248 [pid 6343] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... clone3 resumed> => {parent_tid=[6354]}, 88) = 6354 [pid 6343] <... futex resumed>) = 0 [pid 6354] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6352] <... futex resumed>) = 1 [pid 6349] rt_sigprocmask(SIG_SETMASK, [], [pid 6343] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6342] <... futex resumed>) = 0 [pid 6354] set_robust_list(0x7eff81ecd9a0, 24 [pid 6352] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] exit_group(0 [pid 6354] <... set_robust_list resumed>) = 0 [pid 6349] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] rt_sigprocmask(SIG_SETMASK, [], [pid 6352] <... futex resumed>) = ? [pid 6349] <... futex resumed>) = 0 [pid 6343] <... futex resumed>) = ? [pid 6342] <... exit_group resumed>) = ? [pid 6354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6352] +++ exited with 0 +++ [pid 6354] memfd_create("syzkaller", 0 [pid 6353] munmap(0x7eff79a00000, 138412032 [pid 6349] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6343] +++ exited with 0 +++ [pid 6342] +++ exited with 0 +++ [pid 6354] <... memfd_create resumed>) = 3 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6342, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6354] <... mmap resumed>) = 0x7eff79a00000 [pid 6353] <... munmap resumed>) = 0 [pid 6351] <... ioctl resumed>) = 0 [pid 6350] <... write resumed>) = 524288 [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6350] munmap(0x7eff79a00000, 138412032 [pid 5076] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6344] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 175.043924][ T6351] loop3: detected capacity change from 0 to 1024 [pid 5076] unlink("./69/binderfs" [pid 6353] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 6353] <... openat resumed>) = 4 [pid 5076] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] ioctl(4, LOOP_SET_FD, 3 [pid 6351] close(3 [pid 6350] <... munmap resumed>) = 0 [pid 6344] <... mmap resumed>) = 0x7eff81e8c000 [pid 6351] <... close resumed>) = 0 [pid 6350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6344] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6354] <... write resumed>) = 524288 [pid 6353] <... ioctl resumed>) = 0 [pid 6351] close(4 [pid 6350] <... openat resumed>) = 4 [pid 6344] <... mprotect resumed>) = 0 [pid 6351] <... close resumed>) = 0 [pid 6344] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6351] mkdir("./file1", 0777 [pid 6344] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6351] <... mkdir resumed>) = 0 [pid 6344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6351] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6344] <... clone3 resumed> => {parent_tid=[6355]}, 88) = 6355 [pid 6344] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6355 attached NULL, 8) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6355] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6354] munmap(0x7eff79a00000, 138412032 [pid 6350] ioctl(4, LOOP_SET_FD, 3 [pid 6355] <... rseq resumed>) = 0 [pid 6344] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6344] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6355] set_robust_list(0x7eff81eac9a0, 24 [pid 6354] <... munmap resumed>) = 0 [pid 6350] <... ioctl resumed>) = 0 [pid 5076] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] <... set_robust_list resumed>) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6355] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6354] <... openat resumed>) = 4 [pid 6351] <... mount resumed>) = 0 [pid 6350] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] close(3 [pid 6351] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] <... close resumed>) = 0 [pid 6351] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] close(4 [pid 6351] chdir("./file1" [pid 5076] <... openat resumed>) = 4 [pid 6353] <... close resumed>) = 0 [pid 6351] <... chdir resumed>) = 0 [pid 6353] mkdir("./file1", 0777 [ 175.092513][ T6353] loop1: detected capacity change from 0 to 1024 [ 175.112632][ T6350] loop0: detected capacity change from 0 to 1024 [ 175.121332][ T6345] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6351] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] newfstatat(4, "", [pid 6353] <... mkdir resumed>) = 0 [pid 6351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6353] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6351] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6351] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 6351] creat("./file0", 000 [pid 6347] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... creat resumed>) = 4 [pid 6347] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6347] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 6351] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6351] <... futex resumed>) = 1 [pid 6347] <... futex resumed>) = 0 [pid 5076] close(4 [pid 6353] <... mount resumed>) = 0 [pid 6351] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6347] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6347] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6353] <... openat resumed>) = 3 [pid 6351] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6347] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] rmdir("./69/file1" [pid 6353] chdir("./file1" [pid 6350] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6354] ioctl(4, LOOP_SET_FD, 3 [pid 6350] close(4 [pid 6344] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6353] <... chdir resumed>) = 0 [pid 6354] <... ioctl resumed>) = 0 [pid 6353] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6350] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6354] close(3 [pid 6350] mkdir("./file1", 0777 [pid 6354] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] close(3 [pid 6354] close(4 [pid 6350] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6354] <... close resumed>) = 0 [pid 6353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6350] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] rmdir("./69" [pid 6354] mkdir("./file1", 0777) = 0 [pid 6353] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 6354] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6353] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 5076] mkdir("./70", 0777 [pid 6348] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] creat("./file0", 000 [pid 6348] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6353] <... creat resumed>) = 4 [pid 6348] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 175.136252][ T28] audit: type=1800 audit(1708423252.755:421): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 175.165879][ T6345] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.166025][ T6354] loop2: detected capacity change from 0 to 1024 [ 175.179384][ T6351] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6355] <... open resumed>) = 5 [pid 6353] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 6355] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 1 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6355] <... futex resumed>) = 0 [pid 6355] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] <... futex resumed>) = 0 [pid 6348] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6348] <... futex resumed>) = 0 [pid 6347] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... futex resumed>) = 0 [pid 6347] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6347] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6347] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6347] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6356]}, 88) = 6356 [pid 6347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6347] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6347] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6356 attached [pid 6350] <... mount resumed>) = 0 [pid 6356] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6350] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6356] <... rseq resumed>) = 0 [pid 6350] <... openat resumed>) = 3 [ 175.203220][ T6345] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.210540][ T6345] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.231169][ T6353] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.239925][ T6351] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6356] set_robust_list(0x7eff81eac9a0, 24 [pid 6354] <... mount resumed>) = 0 [pid 6350] chdir("./file1") = 0 [pid 6354] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6356] <... set_robust_list resumed>) = 0 [pid 6354] <... openat resumed>) = 3 [pid 6350] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... ioctl resumed>) = 0 [pid 6348] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] chdir("./file1" [pid 6350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6348] <... futex resumed>) = 0 [pid 6356] rt_sigprocmask(SIG_SETMASK, [], [ 175.274353][ T6351] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.281681][ T6351] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.289107][ T6353] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 5076] close(3 [pid 6356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6350] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... chdir resumed>) = 0 [pid 6348] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6356] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6350] <... futex resumed>) = 1 [pid 6346] <... futex resumed>) = 0 [pid 6347] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6348] <... mprotect resumed>) = 0 [pid 6346] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6346] <... futex resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6357 [pid 6350] creat("./file0", 000 [pid 6354] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6346] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6357 attached [pid 6354] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6350] <... creat resumed>) = 4 [pid 6348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6357] set_robust_list(0x5555571ca6a0, 24 [pid 6348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6357] <... set_robust_list resumed>) = 0 [pid 6357] chdir("./70" [pid 6348] <... clone3 resumed> => {parent_tid=[6358]}, 88) = 6358 [pid 6350] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... chdir resumed>) = 0 [pid 6350] <... futex resumed>) = 1 [pid 6348] rt_sigprocmask(SIG_SETMASK, [], [pid 6346] <... futex resumed>) = 0 [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6346] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6354] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6348] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 6346] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6358 attached [pid 6357] <... prctl resumed>) = 0 [pid 6354] <... futex resumed>) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6348] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6357] setpgid(0, 0 [pid 6354] creat("./file0", 000 [pid 6349] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... setpgid resumed>) = 0 [pid 6358] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6354] <... creat resumed>) = 4 [pid 6349] <... futex resumed>) = 0 [pid 6358] <... rseq resumed>) = 0 [pid 6358] set_robust_list(0x7eff81eac9a0, 24 [pid 6357] <... openat resumed>) = 3 [pid 6349] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6358] <... set_robust_list resumed>) = 0 [ 175.310066][ T28] audit: type=1800 audit(1708423252.925:422): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 175.322570][ T6345] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.340077][ T6353] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6357] write(3, "1000", 4 [pid 6358] rt_sigprocmask(SIG_SETMASK, [], [pid 6357] <... write resumed>) = 4 [pid 6354] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6357] close(3 [pid 6354] <... futex resumed>) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6358] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6357] <... close resumed>) = 0 [pid 6357] symlink("/dev/binderfs", "./binderfs" [pid 6354] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6349] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... symlink resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6357] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6357] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6349] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6357] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6346] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 175.376246][ T6353] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.391456][ T6350] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.391557][ T6351] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.406379][ T6354] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.408799][ T6345] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6357] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6357] <... mprotect resumed>) = 0 [pid 6346] <... mmap resumed>) = 0x7eff81e8c000 [ 175.436016][ T28] audit: type=1800 audit(1708423253.005:423): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 175.438557][ T6350] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.458013][ T6353] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.471128][ T6354] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6346] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6357] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6359]}, 88) = 6359 [pid 6357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6357] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6357] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6349] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] <... mprotect resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6346] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6359 attached [pid 6349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6346] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6359] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6359] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6359] memfd_create("syzkaller", 0 [pid 6358] <... open resumed>) = 5 [pid 6359] <... memfd_create resumed>) = 3 [pid 6358] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6358] <... futex resumed>) = 0 [pid 6359] <... mmap resumed>) = 0x7eff79a00000 [pid 6358] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6349] <... mmap resumed>) = 0x7eff81e8c000 [pid 6346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6345] <... write resumed>) = 53248 [pid 6356] <... open resumed>) = 5 [pid 6349] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6345] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6349] <... mprotect resumed>) = 0 [pid 6346] <... clone3 resumed> => {parent_tid=[6360]}, 88) = 6360 [pid 6345] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6346] rt_sigprocmask(SIG_SETMASK, [], [pid 6353] <... write resumed>) = 53248 [pid 6349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6353] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] exit_group(0 [pid 6355] <... futex resumed>) = ? [pid 6345] <... futex resumed>) = ? [pid 6344] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6360 attached [pid 6356] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] +++ exited with 0 +++ [pid 6353] <... futex resumed>) = 0 [pid 6351] <... write resumed>) = 53248 [pid 6349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6345] +++ exited with 0 +++ [pid 6344] +++ exited with 0 +++ [pid 6360] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6359] <... write resumed>) = 524288 [pid 6356] <... futex resumed>) = 0 [pid 6353] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6348] exit_group(0 [pid 6346] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6344, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6356] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6360] <... rseq resumed>) = 0 [pid 6348] <... exit_group resumed>) = ? [pid 6346] <... futex resumed>) = 0 [pid 6358] <... futex resumed>) = ? [pid 6346] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6360] set_robust_list(0x7eff81eac9a0, 24./strace-static-x86_64: Process 6361 attached [pid 6358] +++ exited with 0 +++ [pid 6360] <... set_robust_list resumed>) = 0 [pid 6349] <... clone3 resumed> => {parent_tid=[6361]}, 88) = 6361 [pid 5075] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6361] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6360] rt_sigprocmask(SIG_SETMASK, [], [pid 6349] rt_sigprocmask(SIG_SETMASK, [], [pid 6361] <... rseq resumed>) = 0 [pid 6360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6361] set_robust_list(0x7eff81eac9a0, 24 [pid 6360] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6353] <... futex resumed>) = ? [pid 6351] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6361] <... set_robust_list resumed>) = 0 [pid 6361] rt_sigprocmask(SIG_SETMASK, [], [pid 6353] +++ exited with 0 +++ [pid 6351] <... futex resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6347] exit_group(0 [pid 6348] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 6361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6356] <... futex resumed>) = ? [pid 6349] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6347] <... exit_group resumed>) = ? [ 175.479056][ T6353] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.490003][ T6351] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.490981][ T6354] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(3, "", [pid 6361] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6356] +++ exited with 0 +++ [pid 6351] +++ exited with 0 +++ [pid 6347] +++ exited with 0 +++ [pid 6359] munmap(0x7eff79a00000, 138412032 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6361] <... open resumed>) = 5 [pid 6361] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6361] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6347, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5072] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5074] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5075] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6359] <... munmap resumed>) = 0 [pid 5075] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(3, "", [pid 5072] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 175.542781][ T6354] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.546767][ T6350] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.558495][ T6350] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.579807][ T6354] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6360] <... open resumed>) = 5 [pid 6359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6346] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] unlink("./69/binderfs" [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./69/binderfs" [pid 5074] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 [pid 6359] <... openat resumed>) = 4 [pid 5075] <... unlink resumed>) = 0 [pid 6360] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6360] <... futex resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5072] <... umount2 resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6360] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] unlink("./70/binderfs" [pid 5072] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./69/file1", [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 6359] <... ioctl resumed>) = 0 [pid 5074] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] close(3 [pid 6350] <... write resumed>) = 53248 [pid 6359] <... close resumed>) = 0 [pid 6350] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] close(4 [pid 6354] <... write resumed>) = 53248 [pid 6350] <... futex resumed>) = 0 [pid 6350] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... umount2 resumed>) = 0 [pid 5072] rmdir("./69/file1" [pid 5075] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./69/file1", [pid 6359] <... close resumed>) = 0 [pid 6354] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6346] exit_group(0 [pid 5072] <... rmdir resumed>) = 0 [pid 6360] <... futex resumed>) = ? [pid 6359] mkdir("./file1", 0777 [pid 6354] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = ? [pid 6349] exit_group(0 [pid 6346] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6361] <... futex resumed>) = ? [pid 6360] +++ exited with 0 +++ [pid 6350] +++ exited with 0 +++ [pid 6349] <... exit_group resumed>) = ? [pid 5075] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 6361] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] close(3) = 0 [pid 6359] <... mkdir resumed>) = 0 [pid 6354] +++ exited with 0 +++ [pid 6349] +++ exited with 0 +++ [pid 6346] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = 0 [pid 6359] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5072] rmdir("./69" [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6346, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6349, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] newfstatat(AT_FDCWD, "./70/file1", [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 175.586132][ T6350] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.600733][ T6359] loop5: detected capacity change from 0 to 1024 [ 175.611434][ T6354] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.613528][ T6350] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] mkdir("./70", 0777 [pid 5071] <... openat resumed>) = 3 [pid 5075] close(4 [pid 5074] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 5073] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6359] <... mount resumed>) = 0 [pid 5075] rmdir("./69/file1" [pid 5074] <... openat resumed>) = 4 [pid 5073] <... openat resumed>) = 3 [pid 5071] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] newfstatat(3, "", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6359] <... openat resumed>) = 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6359] chdir("./file1" [pid 5074] getdents64(4, [pid 5073] getdents64(3, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6359] <... chdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... openat resumed>) = 3 [pid 5071] unlink("./71/binderfs" [pid 6359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [pid 6359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] close(3 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6359] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 5074] close(4 [pid 5073] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6359] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5075] rmdir("./69" [pid 6357] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] rmdir("./70/file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6357] <... futex resumed>) = 0 [pid 5075] mkdir("./70", 0777 [pid 6357] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] creat("./file0", 000 [pid 5073] unlink("./70/binderfs") = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 6359] <... creat resumed>) = 4 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] getdents64(3, [pid 6359] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6359] <... futex resumed>) = 1 [pid 6357] <... futex resumed>) = 0 [pid 6359] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6357] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] <... futex resumed>) = 0 [pid 6357] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./70/file1", [pid 5074] rmdir("./70" [pid 5071] newfstatat(AT_FDCWD, "./71/file1", [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] mkdir("./71", 0777 [pid 5073] newfstatat(4, "", [pid 5071] <... openat resumed>) = 4 [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] newfstatat(4, "", [pid 5073] getdents64(4, [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, [pid 5074] <... openat resumed>) = 3 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] getdents64(4, [pid 5073] close(4 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] close(4 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] rmdir("./70/file1" [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 6357] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] <... close resumed>) = 0 [pid 5075] close(3 [pid 6357] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] rmdir("./71/file1" [pid 6357] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6362 attached [pid 6357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(3, [pid 5071] <... rmdir resumed>) = 0 [pid 6357] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6362 [pid 5071] getdents64(3, [pid 6362] set_robust_list(0x5555571ca6a0, 24 [pid 6357] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] close(3 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6362] <... set_robust_list resumed>) = 0 [pid 6357] <... mprotect resumed>) = 0 [pid 6362] chdir("./70" [pid 5071] close(3 [pid 5073] <... close resumed>) = 0 [pid 6362] <... chdir resumed>) = 0 [pid 6357] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] rmdir("./70" [pid 5071] <... close resumed>) = 0 [pid 6357] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] rmdir("./71" [ 175.740629][ T6359] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.752336][ T6359] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.762577][ T6359] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.772511][ T6359] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6363 ./strace-static-x86_64: Process 6364 attached [pid 6362] <... prctl resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6363 attached [pid 6363] set_robust_list(0x5555571ca6a0, 24 [pid 6357] <... clone3 resumed> => {parent_tid=[6364]}, 88) = 6364 [pid 6363] <... set_robust_list resumed>) = 0 [pid 6363] chdir("./70") = 0 [pid 6363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6363] setpgid(0, 0 [pid 6357] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] mkdir("./72", 0777 [pid 6364] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6362] setpgid(0, 0 [pid 6357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] mkdir("./71", 0777 [pid 6364] <... rseq resumed>) = 0 [pid 6362] <... setpgid resumed>) = 0 [pid 6357] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6363] <... setpgid resumed>) = 0 [pid 6363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6357] <... futex resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6364] set_robust_list(0x7eff81eac9a0, 24 [pid 6363] <... openat resumed>) = 3 [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6357] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6364] <... set_robust_list resumed>) = 0 [pid 6363] write(3, "1000", 4 [pid 5071] <... mkdir resumed>) = 0 [pid 6363] <... write resumed>) = 4 [pid 6364] rt_sigprocmask(SIG_SETMASK, [], [pid 6363] close(3 [pid 6362] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6363] <... close resumed>) = 0 [pid 6363] symlink("/dev/binderfs", "./binderfs" [pid 6364] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6363] <... symlink resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 6363] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6363] <... futex resumed>) = 0 [pid 5074] close(3 [pid 6363] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 5074] <... close resumed>) = 0 [pid 6363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6362] write(3, "1000", 4 [pid 6363] <... mmap resumed>) = 0x7eff81ead000 [pid 6363] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6362] <... write resumed>) = 4 [pid 6363] <... mprotect resumed>) = 0 [pid 6363] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6362] close(3 [pid 6363] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6362] <... close resumed>) = 0 ./strace-static-x86_64: Process 6365 attached [pid 6364] <... open resumed>) = 5 [pid 6363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6362] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6365 [pid 6365] set_robust_list(0x5555571ca6a0, 24 [pid 6364] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... symlink resumed>) = 0 [pid 6359] <... write resumed>) = 53248 ./strace-static-x86_64: Process 6366 attached [pid 6365] <... set_robust_list resumed>) = 0 [pid 6363] <... clone3 resumed> => {parent_tid=[6366]}, 88) = 6366 [pid 6362] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [ 175.802771][ T6359] hfsplus: request for non-existent node 16777216 in B*Tree [ 175.810430][ T6359] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6366] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6364] <... futex resumed>) = 1 [pid 6359] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6357] <... futex resumed>) = 0 [pid 6366] <... rseq resumed>) = 0 [pid 6363] rt_sigprocmask(SIG_SETMASK, [], [pid 6366] set_robust_list(0x7eff81ecd9a0, 24 [pid 6363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6366] <... set_robust_list resumed>) = 0 [pid 6365] chdir("./71" [pid 6363] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] <... chdir resumed>) = 0 [pid 6363] <... futex resumed>) = 0 [pid 6366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6363] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6366] memfd_create("syzkaller", 0 [pid 6365] <... prctl resumed>) = 0 [pid 6365] setpgid(0, 0) = 0 [pid 6366] <... memfd_create resumed>) = 3 [pid 6365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6365] write(3, "1000", 4 [pid 5071] <... ioctl resumed>) = 0 [pid 6366] <... mmap resumed>) = 0x7eff79a00000 [pid 6365] <... write resumed>) = 4 [pid 6362] <... futex resumed>) = 0 [pid 6359] <... futex resumed>) = 0 [pid 6357] exit_group(0 [pid 6366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6365] close(3) = 0 [pid 6365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6362] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6357] <... exit_group resumed>) = ? [pid 5073] <... ioctl resumed>) = 0 [pid 6362] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6359] +++ exited with 0 +++ [pid 6362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6365] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6364] +++ exited with 0 +++ [pid 6362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6357] +++ exited with 0 +++ [pid 5071] close(3 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6357, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6362] <... mmap resumed>) = 0x7eff81ead000 [pid 6362] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6365] <... futex resumed>) = 0 [pid 5076] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6367 attached [pid 6365] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] newfstatat(3, "", [pid 6367] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6365] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] getdents64(3, [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6365] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6367] <... rseq resumed>) = 0 [pid 6365] <... mprotect resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6367] set_robust_list(0x7eff81ecd9a0, 24 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6362] <... clone3 resumed> => {parent_tid=[6367]}, 88) = 6367 [pid 5076] unlink("./70/binderfs" [pid 5073] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6367] <... set_robust_list resumed>) = 0 [pid 6365] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6362] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... unlink resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6367] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6368 attached [pid 6367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6369 attached [pid 6368] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6367] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6366] <... write resumed>) = 524288 [pid 6365] <... clone3 resumed> => {parent_tid=[6368]}, 88) = 6368 [pid 6362] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6369 [pid 6369] set_robust_list(0x5555571ca6a0, 24 [pid 6368] <... rseq resumed>) = 0 [pid 6367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6362] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6369] <... set_robust_list resumed>) = 0 [pid 6368] set_robust_list(0x7eff81ecd9a0, 24 [pid 6367] memfd_create("syzkaller", 0 [pid 6366] munmap(0x7eff79a00000, 138412032 [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6370 attached [pid 6369] chdir("./72" [pid 6368] <... set_robust_list resumed>) = 0 [pid 6367] <... memfd_create resumed>) = 3 [pid 6365] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6370 [pid 6370] set_robust_list(0x5555571ca6a0, 24 [pid 6369] <... chdir resumed>) = 0 [pid 6368] rt_sigprocmask(SIG_SETMASK, [], [pid 6367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6365] <... futex resumed>) = 0 [pid 6370] <... set_robust_list resumed>) = 0 [pid 6369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6367] <... mmap resumed>) = 0x7eff79a00000 [pid 6365] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6370] chdir("./71" [pid 6369] <... prctl resumed>) = 0 [pid 6368] memfd_create("syzkaller", 0 [pid 6366] <... munmap resumed>) = 0 [pid 6370] <... chdir resumed>) = 0 [pid 6369] setpgid(0, 0 [pid 6368] <... memfd_create resumed>) = 3 [pid 6367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6366] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6369] <... setpgid resumed>) = 0 [pid 6368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6370] <... prctl resumed>) = 0 [pid 6369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6368] <... mmap resumed>) = 0x7eff79a00000 [pid 6366] <... openat resumed>) = 4 [pid 5076] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] setpgid(0, 0 [pid 6369] <... openat resumed>) = 3 [pid 6368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6366] ioctl(4, LOOP_SET_FD, 3 [pid 6370] <... setpgid resumed>) = 0 [pid 6370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./70/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] <... openat resumed>) = 3 [pid 6369] write(3, "1000", 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6367] <... write resumed>) = 524288 [pid 5076] <... openat resumed>) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6366] <... ioctl resumed>) = 0 [pid 5076] getdents64(4, [pid 6366] close(3 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6366] <... close resumed>) = 0 [pid 5076] close(4 [pid 6366] close(4 [pid 5076] <... close resumed>) = 0 [pid 6366] <... close resumed>) = 0 [pid 5076] rmdir("./70/file1" [pid 6370] write(3, "1000", 4 [pid 6369] <... write resumed>) = 4 [pid 6366] mkdir("./file1", 0777 [pid 5076] <... rmdir resumed>) = 0 [pid 6370] <... write resumed>) = 4 [pid 6369] close(3 [pid 6367] munmap(0x7eff79a00000, 138412032 [pid 6366] <... mkdir resumed>) = 0 [pid 5076] getdents64(3, [pid 6370] close(3 [pid 6369] <... close resumed>) = 0 [pid 6367] <... munmap resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6370] <... close resumed>) = 0 [pid 6369] symlink("/dev/binderfs", "./binderfs" [pid 5076] close(3 [pid 6366] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] <... close resumed>) = 0 [pid 6370] symlink("/dev/binderfs", "./binderfs" [pid 6369] <... symlink resumed>) = 0 [pid 5076] rmdir("./70" [pid 6370] <... symlink resumed>) = 0 [pid 6369] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... rmdir resumed>) = 0 [pid 6370] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = 0 [pid 6368] <... write resumed>) = 524288 [pid 6367] <... openat resumed>) = 4 [ 175.978579][ T6366] loop4: detected capacity change from 0 to 1024 [pid 6366] <... mount resumed>) = 0 [pid 6370] <... futex resumed>) = 0 [pid 6369] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6368] munmap(0x7eff79a00000, 138412032 [pid 6367] ioctl(4, LOOP_SET_FD, 3 [pid 6366] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] mkdir("./71", 0777 [pid 6370] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6369] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6368] <... munmap resumed>) = 0 [pid 6367] <... ioctl resumed>) = 0 [pid 6366] <... openat resumed>) = 3 [pid 6370] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6366] chdir("./file1" [pid 5076] <... mkdir resumed>) = 0 [pid 6370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6368] <... openat resumed>) = 4 [pid 6366] <... chdir resumed>) = 0 [pid 6369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6368] ioctl(4, LOOP_SET_FD, 3 [pid 6366] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6369] <... mmap resumed>) = 0x7eff81ead000 [pid 6366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6366] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 6366] <... futex resumed>) = 1 [pid 6363] <... futex resumed>) = 0 [pid 6366] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6363] <... futex resumed>) = 0 [pid 6363] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6366] creat("./file0", 000) = 4 [pid 6370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6369] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6366] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... mmap resumed>) = 0x7eff81ead000 [pid 6369] <... mprotect resumed>) = 0 [pid 6369] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6363] <... futex resumed>) = 0 [pid 6363] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] <... futex resumed>) = 1 [pid 6366] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6370] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6369] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6370] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6371 attached [pid 6370] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6368] <... ioctl resumed>) = 0 [pid 6367] close(3) = 0 [pid 6371] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6370] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6368] close(3 [pid 6371] <... rseq resumed>) = 0 [pid 6370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6369] <... clone3 resumed> => {parent_tid=[6371]}, 88) = 6371 [pid 6368] <... close resumed>) = 0 [pid 6371] set_robust_list(0x7eff81ecd9a0, 24 [pid 6368] close(4 [pid 6369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6371] <... set_robust_list resumed>) = 0 [pid 6368] <... close resumed>) = 0 [pid 6369] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] mkdir("./file1", 0777 [pid 6369] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6372 attached [pid 6371] rt_sigprocmask(SIG_SETMASK, [], [pid 6369] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6368] <... mkdir resumed>) = 0 [pid 6367] close(4 [pid 6372] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6370] <... clone3 resumed> => {parent_tid=[6372]}, 88) = 6372 [pid 6372] <... rseq resumed>) = 0 [pid 6372] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6372] rt_sigprocmask(SIG_SETMASK, [], [pid 6371] memfd_create("syzkaller", 0 [pid 6370] rt_sigprocmask(SIG_SETMASK, [], [pid 6367] <... close resumed>) = 0 [pid 6372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6367] mkdir("./file1", 0777 [pid 6372] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6368] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6367] <... mkdir resumed>) = 0 [pid 6367] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6370] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... futex resumed>) = 0 [pid 6370] <... futex resumed>) = 1 [ 176.025485][ T6367] loop1: detected capacity change from 0 to 1024 [ 176.038825][ T6368] loop3: detected capacity change from 0 to 1024 [ 176.059473][ T6366] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6372] memfd_create("syzkaller", 0 [pid 6371] <... memfd_create resumed>) = 3 [pid 6370] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... ioctl resumed>) = 0 [pid 6372] <... memfd_create resumed>) = 3 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6371] <... mmap resumed>) = 0x7eff79a00000 [pid 6363] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6363] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6373]}, 88) = 6373 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6368] <... mount resumed>) = 0 [pid 6363] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6373 attached [pid 6367] <... mount resumed>) = 0 [pid 6373] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6373] <... rseq resumed>) = 0 [pid 6368] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6363] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6373] set_robust_list(0x7eff81eac9a0, 24 [pid 6368] <... openat resumed>) = 3 [pid 6363] <... futex resumed>) = 0 [pid 6368] chdir("./file1") = 0 [pid 6368] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6373] <... set_robust_list resumed>) = 0 [pid 6368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6367] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6363] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] close(3 [pid 6373] rt_sigprocmask(SIG_SETMASK, [], [pid 6367] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 6373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6367] chdir("./file1" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6373] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6367] <... chdir resumed>) = 0 [pid 6373] <... open resumed>) = 5 [pid 6371] <... write resumed>) = 524288 [pid 6368] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6368] <... futex resumed>) = 1 [pid 6367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6365] <... futex resumed>) = 0 [pid 6372] <... write resumed>) = 524288 [pid 6368] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6367] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6374 [pid 6371] munmap(0x7eff79a00000, 138412032./strace-static-x86_64: Process 6374 attached [pid 6373] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 6374] set_robust_list(0x5555571ca6a0, 24 [pid 6373] <... futex resumed>) = 1 [pid 6367] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6363] <... futex resumed>) = 0 [pid 6374] <... set_robust_list resumed>) = 0 [pid 6373] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] chdir("./71" [pid 6371] <... munmap resumed>) = 0 [pid 6365] <... futex resumed>) = 0 [pid 6362] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... chdir resumed>) = 0 [pid 6368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6367] <... futex resumed>) = 0 [ 176.124373][ T6366] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6365] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] <... futex resumed>) = 1 [pid 6374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6372] munmap(0x7eff79a00000, 138412032 [pid 6371] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6368] creat("./file0", 000 [pid 6367] creat("./file0", 000 [pid 6362] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... openat resumed>) = 4 [pid 6374] <... prctl resumed>) = 0 [pid 6372] <... munmap resumed>) = 0 [pid 6371] ioctl(4, LOOP_SET_FD, 3 [pid 6368] <... creat resumed>) = 4 [pid 6367] <... creat resumed>) = 4 [pid 6374] setpgid(0, 0) = 0 [pid 6368] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6368] <... futex resumed>) = 1 [pid 6365] <... futex resumed>) = 0 [pid 6374] <... openat resumed>) = 3 [pid 6368] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6367] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6374] write(3, "1000", 4 [pid 6365] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 6374] <... write resumed>) = 4 [pid 6367] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] close(3 [pid 6367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6374] <... close resumed>) = 0 [pid 6362] <... futex resumed>) = 0 [pid 6367] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6374] symlink("/dev/binderfs", "./binderfs" [pid 6362] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6374] <... symlink resumed>) = 0 [pid 6372] <... openat resumed>) = 4 [pid 6374] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [ 176.167594][ T6366] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.189277][ T6371] loop0: detected capacity change from 0 to 1024 [ 176.191018][ T6366] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 6374] <... futex resumed>) = 0 [pid 6374] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6374] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6375 attached => {parent_tid=[6375]}, 88) = 6375 [pid 6375] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6374] rt_sigprocmask(SIG_SETMASK, [], [pid 6375] <... rseq resumed>) = 0 [pid 6374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6375] set_robust_list(0x7eff81ecd9a0, 24 [pid 6374] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... set_robust_list resumed>) = 0 [pid 6374] <... futex resumed>) = 0 [pid 6375] rt_sigprocmask(SIG_SETMASK, [], [pid 6374] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6375] memfd_create("syzkaller", 0) = 3 [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6365] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... ioctl resumed>) = 0 [pid 6362] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6372] close(3 [pid 6365] <... futex resumed>) = 0 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6372] <... close resumed>) = 0 [pid 6365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6362] <... mmap resumed>) = 0x7eff81e8c000 [pid 6371] <... ioctl resumed>) = 0 [pid 6372] close(4 [pid 6365] <... mmap resumed>) = 0x7eff81e8c000 [pid 6362] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6372] <... close resumed>) = 0 [pid 6371] close(3 [pid 6365] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6362] <... mprotect resumed>) = 0 [pid 6371] <... close resumed>) = 0 [pid 6362] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6372] mkdir("./file1", 0777 [pid 6371] close(4 [pid 6365] <... mprotect resumed>) = 0 [pid 6371] <... close resumed>) = 0 [pid 6365] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6371] mkdir("./file1", 0777 [pid 6372] <... mkdir resumed>) = 0 [pid 6371] <... mkdir resumed>) = 0 [pid 6365] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6362] <... rt_sigprocmask resumed>[], 8) = 0 [ 176.217855][ T6372] loop2: detected capacity change from 0 to 1024 [ 176.231490][ T6368] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.242616][ T6367] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.253220][ T6366] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.253894][ T6367] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6371] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6375] munmap(0x7eff79a00000, 138412032) = 0 [pid 6375] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 6376 attached ) = 4 [pid 6372] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6365] <... clone3 resumed> => {parent_tid=[6376]}, 88) = 6376 [pid 6375] ioctl(4, LOOP_SET_FD, 3 [pid 6376] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6362] <... clone3 resumed> => {parent_tid=[6377]}, 88) = 6377 [pid 6376] <... rseq resumed>) = 0 [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6362] rt_sigprocmask(SIG_SETMASK, [], [pid 6376] set_robust_list(0x7eff81eac9a0, 24 [pid 6365] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6376] <... set_robust_list resumed>) = 0 [pid 6365] <... futex resumed>) = 0 [pid 6376] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6377 attached [pid 6376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6372] <... mount resumed>) = 0 [pid 6362] <... futex resumed>) = 0 [pid 6376] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [ 176.282626][ T6368] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.284335][ T6366] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.290346][ T6368] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.315331][ T6367] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.316549][ T6375] loop5: detected capacity change from 0 to 1024 [pid 6362] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6377] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6377] set_robust_list(0x7eff81eac9a0, 24 [pid 6372] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6377] <... set_robust_list resumed>) = 0 [pid 6377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6377] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6372] <... openat resumed>) = 3 [pid 6371] <... mount resumed>) = 0 [pid 6375] <... ioctl resumed>) = 0 [pid 6371] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6375] close(3 [pid 6371] <... openat resumed>) = 3 [pid 6375] <... close resumed>) = 0 [pid 6371] chdir("./file1" [pid 6375] close(4 [pid 6371] <... chdir resumed>) = 0 [pid 6375] <... close resumed>) = 0 [pid 6371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6375] mkdir("./file1", 0777 [pid 6372] chdir("./file1" [pid 6371] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... chdir resumed>) = 0 [pid 6371] <... futex resumed>) = 1 [pid 6371] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6375] <... mkdir resumed>) = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6369] <... futex resumed>) = 0 [pid 6375] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6366] <... write resumed>) = 53248 [pid 6372] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6369] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = 0 [pid 6369] <... futex resumed>) = 1 [pid 6366] <... futex resumed>) = 0 [pid 6372] <... futex resumed>) = 1 [pid 6371] creat("./file0", 000 [pid 6370] <... futex resumed>) = 0 [pid 6369] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6366] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 176.342203][ T6367] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.354159][ T6367] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.361487][ T6367] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6363] exit_group(0 [pid 6373] <... futex resumed>) = ? [pid 6372] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6371] <... creat resumed>) = 4 [pid 6370] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6366] <... futex resumed>) = ? [pid 6365] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6363] <... exit_group resumed>) = ? [pid 6373] +++ exited with 0 +++ [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6371] <... futex resumed>) = 1 [pid 6366] +++ exited with 0 +++ [pid 6363] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6363, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6371] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6372] creat("./file0", 000 [pid 6370] <... futex resumed>) = 0 [pid 6369] <... futex resumed>) = 0 [pid 6370] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6369] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... creat resumed>) = 4 [pid 6371] <... futex resumed>) = 0 [pid 6369] <... futex resumed>) = 1 [pid 5075] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6369] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6375] <... mount resumed>) = 0 [pid 6372] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6375] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6372] <... futex resumed>) = 1 [pid 6370] <... futex resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6376] <... open resumed>) = 5 [pid 6372] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6370] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6377] <... open resumed>) = 5 [pid 6375] <... openat resumed>) = 3 [pid 5075] getdents64(3, [pid 6377] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] chdir("./file1" [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6377] <... futex resumed>) = 0 [pid 6375] <... chdir resumed>) = 0 [pid 5075] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] <... futex resumed>) = 0 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6370] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6372] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6376] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6376] <... futex resumed>) = 0 [pid 6375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6377] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6376] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6375] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6375] <... futex resumed>) = 1 [pid 6374] <... futex resumed>) = 0 [pid 5075] unlink("./70/binderfs" [pid 6375] creat("./file0", 000 [pid 6374] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... unlink resumed>) = 0 [pid 6375] <... creat resumed>) = 4 [pid 6374] <... futex resumed>) = 0 [pid 5075] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6375] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] <... write resumed>) = 53248 [pid 6375] <... futex resumed>) = 0 [pid 6374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6367] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [ 176.391916][ T6368] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.415950][ T6371] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.426070][ T6368] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6375] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6374] <... futex resumed>) = 0 [pid 6375] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6374] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] exit_group(0 [pid 6369] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6377] <... futex resumed>) = ? [ 176.450184][ T6372] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.466899][ T6375] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.472123][ T6368] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.482235][ T6371] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.487149][ T6372] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6369] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... exit_group resumed>) = ? [pid 6377] +++ exited with 0 +++ [pid 6370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6369] <... futex resumed>) = 0 [pid 6367] +++ exited with 0 +++ [pid 6362] +++ exited with 0 +++ [pid 6370] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6370] <... futex resumed>) = 0 [pid 6370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6369] <... mmap resumed>) = 0x7eff81e8c000 [pid 6370] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6369] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6362, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6370] <... mprotect resumed>) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6374] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... mprotect resumed>) = 0 [pid 6370] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] <... restart_syscall resumed>) = 0 [pid 6368] <... write resumed>) = 53248 [pid 6370] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6369] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6368] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... futex resumed>) = 0 [pid 6370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6369] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6368] <... futex resumed>) = 0 [pid 6374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 5072] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6374] <... mprotect resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6368] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6365] exit_group(0) = ? [pid 6376] <... futex resumed>) = ? [pid 6376] +++ exited with 0 +++ [pid 6374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6370] <... clone3 resumed> => {parent_tid=[6378]}, 88) = 6378 [pid 6369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6368] <... futex resumed>) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6370] rt_sigprocmask(SIG_SETMASK, [], [pid 6374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] getdents64(3, ./strace-static-x86_64: Process 6378 attached 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6378] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6374] <... clone3 resumed> => {parent_tid=[6379]}, 88) = 6379 [pid 5072] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6378] <... rseq resumed>) = 0 [pid 6374] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6378] set_robust_list(0x7eff81eac9a0, 24 [pid 6374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6378] <... set_robust_list resumed>) = 0 [pid 6374] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] newfstatat(AT_FDCWD, "./70/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6378] rt_sigprocmask(SIG_SETMASK, [], [pid 6374] <... futex resumed>) = 0 [pid 6368] +++ exited with 0 +++ [pid 6365] +++ exited with 0 +++ [pid 6370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./70/binderfs" [pid 6378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6374] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6380 attached ./strace-static-x86_64: Process 6379 attached [pid 6378] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6370] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6365, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5072] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6379] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6370] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6380] <... rseq resumed>) = 0 [pid 6379] <... rseq resumed>) = 0 [ 176.489901][ T6371] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6370] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] set_robust_list(0x7eff81eac9a0, 24 [pid 6379] set_robust_list(0x7eff81eac9a0, 24 [pid 6369] <... clone3 resumed> => {parent_tid=[6380]}, 88) = 6380 [pid 5075] <... openat resumed>) = 4 [pid 6380] <... set_robust_list resumed>) = 0 [pid 6379] <... set_robust_list resumed>) = 0 [pid 6369] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] newfstatat(4, "", [pid 5074] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6380] rt_sigprocmask(SIG_SETMASK, [], [pid 6369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6379] rt_sigprocmask(SIG_SETMASK, [], [pid 6369] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6380] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] getdents64(4, [pid 5074] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6379] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6369] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5075] getdents64(4, [pid 6369] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] newfstatat(3, "", [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(4 [pid 5074] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] rmdir("./70/file1" [pid 5074] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(3, [pid 5074] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] close(3 [pid 5074] unlink("./71/binderfs" [pid 5075] <... close resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5075] rmdir("./70" [pid 5074] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 6379] <... open resumed>) = 5 [pid 6374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... rmdir resumed>) = 0 [pid 6379] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] mkdir("./71", 0777 [pid 6379] <... futex resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6379] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(AT_FDCWD, "./70/file1", [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 176.554519][ T6372] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.565947][ T6375] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.582094][ T6372] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.590674][ T6375] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6369] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6381 [pid 5072] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6381 attached [pid 5072] getdents64(4, [pid 6381] set_robust_list(0x5555571ca6a0, 24 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6381] <... set_robust_list resumed>) = 0 [pid 5072] getdents64(4, [pid 6381] chdir("./71" [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6381] <... chdir resumed>) = 0 [pid 5072] close(4 [pid 6381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... close resumed>) = 0 [pid 5074] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] rmdir("./70/file1" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 6381] <... prctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./71/file1", [pid 5072] getdents64(3, [pid 6381] setpgid(0, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6381] <... setpgid resumed>) = 0 [pid 5074] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] close(3 [pid 6381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [pid 6381] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./70" [pid 6378] <... open resumed>) = 5 [pid 5074] <... openat resumed>) = 4 [pid 6378] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... rmdir resumed>) = 0 [pid 6378] <... futex resumed>) = 0 [ 176.612438][ T6371] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] newfstatat(4, "", [pid 6381] write(3, "1000", 4 [pid 6380] <... open resumed>) = 5 [pid 6378] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] mkdir("./71", 0777 [pid 6381] <... write resumed>) = 4 [pid 6381] close(3 [pid 5074] getdents64(4, [pid 5072] <... mkdir resumed>) = 0 [pid 6381] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6381] symlink("/dev/binderfs", "./binderfs" [pid 6371] <... write resumed>) = 53248 [pid 5074] getdents64(4, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6381] <... symlink resumed>) = 0 [pid 6371] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6381] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = 0 [pid 5074] close(4 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6381] <... futex resumed>) = 0 [pid 6371] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6381] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5074] rmdir("./71/file1" [pid 6381] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5072] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5072] <... close resumed>) = 0 [pid 6381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] getdents64(3, [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6380] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(3 [pid 6381] <... mmap resumed>) = 0x7eff81ead000 [pid 5074] <... close resumed>) = 0 [pid 6381] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5074] rmdir("./71" [pid 6381] <... mprotect resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6381] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5074] mkdir("./72", 0777 [pid 6381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6382 attached ./strace-static-x86_64: Process 6383 attached [pid 6380] <... futex resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6382 [pid 6383] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6380] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6369] exit_group(0 [pid 6383] <... rseq resumed>) = 0 [pid 6382] set_robust_list(0x5555571ca6a0, 24 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6383] set_robust_list(0x7eff81ecd9a0, 24 [pid 6382] <... set_robust_list resumed>) = 0 [pid 6381] <... clone3 resumed> => {parent_tid=[6383]}, 88) = 6383 [pid 6380] <... futex resumed>) = ? [pid 6371] <... futex resumed>) = ? [pid 6369] <... exit_group resumed>) = ? [pid 6371] +++ exited with 0 +++ [pid 6383] <... set_robust_list resumed>) = 0 [pid 6382] chdir("./71" [pid 6381] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... openat resumed>) = 3 [pid 6383] rt_sigprocmask(SIG_SETMASK, [], [pid 6382] <... chdir resumed>) = 0 [pid 6381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6381] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... prctl resumed>) = 0 [pid 6381] <... futex resumed>) = 0 [pid 6382] setpgid(0, 0 [pid 6381] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6382] <... setpgid resumed>) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6380] +++ exited with 0 +++ [pid 6369] +++ exited with 0 +++ [pid 6383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6382] <... openat resumed>) = 3 [pid 6383] memfd_create("syzkaller", 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6369, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6383] <... memfd_create resumed>) = 3 [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6382] write(3, "1000", 4 [pid 6383] <... mmap resumed>) = 0x7eff79a00000 [pid 6382] <... write resumed>) = 4 [pid 6383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6382] close(3 [pid 5071] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6382] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6382] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 3 [pid 6382] <... symlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 6382] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6382] <... futex resumed>) = 0 [pid 6382] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5071] getdents64(3, [pid 6382] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6382] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 176.658137][ T6372] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.665443][ T6371] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.665466][ T6371] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.683483][ T6375] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] <... mmap resumed>) = 0x7eff81ead000 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5071] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6382] <... mprotect resumed>) = 0 [pid 6382] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6382] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5071] unlink("./72/binderfs" [pid 5074] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6384 attached [pid 6382] <... clone3 resumed> => {parent_tid=[6384]}, 88) = 6384 [pid 5071] <... unlink resumed>) = 0 [pid 6382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6382] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6382] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6384] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 5071] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] <... rseq resumed>) = 0 [pid 6384] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6384] memfd_create("syzkaller", 0) = 3 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6383] <... write resumed>) = 524288 [pid 5074] close(3) = 0 [ 176.749615][ T6375] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.772621][ T6372] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6383] munmap(0x7eff79a00000, 138412032 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6383] <... munmap resumed>) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6385 ./strace-static-x86_64: Process 6385 attached [pid 6372] <... write resumed>) = 53248 [pid 6385] set_robust_list(0x5555571ca6a0, 24 [pid 6372] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... set_robust_list resumed>) = 0 [pid 6372] <... futex resumed>) = 0 [pid 6385] chdir("./72" [pid 6372] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... chdir resumed>) = 0 [pid 6383] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6383] <... openat resumed>) = 4 [pid 5071] <... umount2 resumed>) = 0 [pid 6370] exit_group(0 [pid 6385] <... prctl resumed>) = 0 [pid 6383] ioctl(4, LOOP_SET_FD, 3 [pid 6385] setpgid(0, 0 [pid 6383] <... ioctl resumed>) = 0 [pid 6378] <... futex resumed>) = ? [pid 6372] <... futex resumed>) = ? [pid 6370] <... exit_group resumed>) = ? [pid 6372] +++ exited with 0 +++ [pid 5071] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6385] <... setpgid resumed>) = 0 [pid 6384] <... write resumed>) = 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] newfstatat(AT_FDCWD, "./72/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6385] <... openat resumed>) = 3 [pid 6385] write(3, "1000", 4 [pid 6378] +++ exited with 0 +++ [pid 6370] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6385] <... write resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6385] close(3) = 0 [pid 6385] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... openat resumed>) = 4 [pid 6385] <... symlink resumed>) = 0 [pid 6375] <... write resumed>) = 53248 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6370, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5071] newfstatat(4, "", [pid 6375] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6375] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6375] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6385] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] close(3 [pid 6385] <... futex resumed>) = 0 [pid 6383] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] getdents64(4, [pid 6385] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6383] close(4 [pid 6374] exit_group(0 [pid 6385] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6383] <... close resumed>) = 0 [pid 6379] <... futex resumed>) = ? [pid 6375] <... futex resumed>) = ? [pid 6374] <... exit_group resumed>) = ? [pid 5073] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6384] munmap(0x7eff79a00000, 138412032 [ 176.807647][ T6375] hfsplus: request for non-existent node 16777216 in B*Tree [ 176.833127][ T6383] loop4: detected capacity change from 0 to 1024 [pid 6383] mkdir("./file1", 0777 [pid 6379] +++ exited with 0 +++ [pid 6375] +++ exited with 0 +++ [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6384] <... munmap resumed>) = 0 [pid 6383] <... mkdir resumed>) = 0 [pid 6374] +++ exited with 0 +++ [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6383] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6385] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6374, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6385] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6385] <... mprotect resumed>) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6384] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] close(4 [pid 6385] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6384] <... openat resumed>) = 4 [pid 5073] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5071] rmdir("./72/file1" [pid 5076] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] newfstatat(3, "", ./strace-static-x86_64: Process 6386 attached [pid 6385] <... clone3 resumed> => {parent_tid=[6386]}, 88) = 6386 [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 5073] unlink("./71/binderfs" [pid 5071] <... rmdir resumed>) = 0 [pid 6386] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6385] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6386] <... rseq resumed>) = 0 [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] getdents64(3, [pid 5073] <... unlink resumed>) = 0 [pid 5071] getdents64(3, [pid 6386] set_robust_list(0x7eff81ecd9a0, 24 [pid 6385] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6386] <... set_robust_list resumed>) = 0 [pid 5073] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6386] rt_sigprocmask(SIG_SETMASK, [], [pid 6385] <... futex resumed>) = 0 [pid 5076] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6385] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 6386] memfd_create("syzkaller", 0 [pid 5076] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6386] <... memfd_create resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... close resumed>) = 0 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6383] <... mount resumed>) = 0 [pid 5076] unlink("./71/binderfs" [pid 6386] <... mmap resumed>) = 0x7eff79a00000 [pid 5076] <... unlink resumed>) = 0 [pid 5071] rmdir("./72" [pid 5076] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 6386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6383] <... openat resumed>) = 3 [pid 5071] mkdir("./73", 0777 [pid 6384] <... ioctl resumed>) = 0 [pid 6384] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 6384] <... close resumed>) = 0 [pid 6384] close(4) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6384] mkdir("./file1", 0777) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6383] chdir("./file1" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6384] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6383] <... chdir resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5071] close(3 [ 176.924150][ T6384] loop1: detected capacity change from 0 to 1024 [pid 6383] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6383] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] newfstatat(AT_FDCWD, "./71/file1", ./strace-static-x86_64: Process 6387 attached [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6387 [pid 6383] creat("./file0", 000 [pid 6381] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6387] set_robust_list(0x5555571ca6a0, 24 [pid 6381] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6387] <... set_robust_list resumed>) = 0 [pid 6383] <... creat resumed>) = 4 [pid 5076] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] chdir("./73" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6386] <... write resumed>) = 524288 [pid 6383] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 5073] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6387] <... chdir resumed>) = 0 [pid 6386] munmap(0x7eff79a00000, 138412032 [pid 6383] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 4 [pid 6387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6386] <... munmap resumed>) = 0 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 5073] newfstatat(4, "", [pid 6384] <... mount resumed>) = 0 [pid 6383] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6381] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6387] <... prctl resumed>) = 0 [pid 6384] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] close(4 [pid 5073] getdents64(4, [pid 6387] setpgid(0, 0 [pid 6386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6387] <... setpgid resumed>) = 0 [pid 6386] <... openat resumed>) = 4 [pid 6384] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 6384] chdir("./file1" [pid 5076] rmdir("./71/file1" [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6386] ioctl(4, LOOP_SET_FD, 3 [pid 6384] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5073] close(4 [pid 6386] <... ioctl resumed>) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5076] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 6387] write(3, "1000", 4 [pid 6384] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./71/file1" [pid 6384] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 5076] close(3 [pid 6384] creat("./file0", 000 [pid 6382] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] <... write resumed>) = 4 [pid 6384] <... creat resumed>) = 4 [pid 6382] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6387] close(3 [pid 6382] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] rmdir("./71" [pid 5073] getdents64(3, [pid 6387] <... close resumed>) = 0 [pid 6384] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... rmdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6387] symlink("/dev/binderfs", "./binderfs" [pid 6384] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6381] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./72", 0777 [pid 6384] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6382] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] <... symlink resumed>) = 0 [pid 6381] <... futex resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5073] close(3 [pid 6387] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... futex resumed>) = 0 [pid 6381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6387] <... futex resumed>) = 0 [pid 6382] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6381] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] <... openat resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 6387] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6381] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [ 177.024259][ T6383] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.031597][ T6383] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.055017][ T6386] loop3: detected capacity change from 0 to 1024 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6387] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6386] close(3 [pid 6381] <... mprotect resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] rmdir("./71" [pid 6387] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6386] <... close resumed>) = 0 [pid 6381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 6386] close(4 [pid 6381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... close resumed>) = 0 [pid 6386] <... close resumed>) = 0 [pid 6381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6386] mkdir("./file1", 0777) = 0 [pid 6381] <... clone3 resumed> => {parent_tid=[6389]}, 88) = 6389 [pid 6386] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6381] rt_sigprocmask(SIG_SETMASK, [], [pid 6387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6381] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 177.086299][ T6384] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.122604][ T6383] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 6388 attached ./strace-static-x86_64: Process 6389 attached [pid 6387] <... mmap resumed>) = 0x7eff81ead000 [pid 6381] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] mkdir("./72", 0777 [pid 6388] set_robust_list(0x5555571ca6a0, 24 [pid 6387] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6389] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6389] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6389] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6388 [pid 5073] <... mkdir resumed>) = 0 [pid 6387] <... mprotect resumed>) = 0 [pid 6388] <... set_robust_list resumed>) = 0 [pid 6389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6387] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6388] chdir("./72" [pid 6389] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6387] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6388] <... chdir resumed>) = 0 [pid 6387] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6390 attached ) = 0 [pid 6387] <... clone3 resumed> => {parent_tid=[6390]}, 88) = 6390 [pid 6382] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6388] setpgid(0, 0 [pid 6387] rt_sigprocmask(SIG_SETMASK, [], [pid 6388] <... setpgid resumed>) = 0 [pid 6387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6390] <... rseq resumed>) = 0 [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6387] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... futex resumed>) = 0 [pid 6387] <... futex resumed>) = 0 [pid 6382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6390] set_robust_list(0x7eff81ecd9a0, 24 [pid 6388] <... openat resumed>) = 3 [pid 6387] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6382] <... mmap resumed>) = 0x7eff81e8c000 [pid 6390] <... set_robust_list resumed>) = 0 [ 177.129928][ T6383] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6390] rt_sigprocmask(SIG_SETMASK, [], [pid 6388] write(3, "1000", 4 [pid 6386] <... mount resumed>) = 0 [pid 6382] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6388] <... write resumed>) = 4 [pid 6382] <... mprotect resumed>) = 0 [pid 6382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6386] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6382] <... clone3 resumed> => {parent_tid=[6391]}, 88) = 6391 [pid 6386] chdir("./file1" [pid 6382] rt_sigprocmask(SIG_SETMASK, [], [pid 6381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6386] <... chdir resumed>) = 0 [pid 6382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6386] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6382] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6382] <... futex resumed>) = 0 [pid 6386] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6391 attached [pid 6390] memfd_create("syzkaller", 0 [pid 6388] close(3 [pid 6386] <... futex resumed>) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6391] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6390] <... memfd_create resumed>) = 3 [pid 6388] <... close resumed>) = 0 [pid 6386] creat("./file0", 000 [pid 6385] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... rseq resumed>) = 0 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6386] <... creat resumed>) = 4 [pid 6385] <... futex resumed>) = 0 [pid 6388] symlink("/dev/binderfs", "./binderfs" [pid 6391] set_robust_list(0x7eff81eac9a0, 24 [pid 6386] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... set_robust_list resumed>) = 0 [pid 6390] <... mmap resumed>) = 0x7eff79a00000 [pid 6388] <... symlink resumed>) = 0 [pid 6386] <... futex resumed>) = 0 [pid 6385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 177.163006][ T6384] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.170788][ T6384] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6391] rt_sigprocmask(SIG_SETMASK, [], [pid 6388] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] <... open resumed>) = 5 [pid 6386] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6385] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6388] <... futex resumed>) = 0 [pid 6391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6388] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6389] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6389] <... futex resumed>) = 0 [pid 6388] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6389] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6388] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6390] <... write resumed>) = 524288 [pid 6388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... ioctl resumed>) = 0 [ 177.206681][ T6383] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.234187][ T6386] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.242642][ T6384] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6390] munmap(0x7eff79a00000, 138412032 [pid 6388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] close(3 [pid 6385] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6388] <... clone3 resumed> => {parent_tid=[6392]}, 88) = 6392 [pid 5073] <... close resumed>) = 0 ./strace-static-x86_64: Process 6392 attached [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6392] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6388] rt_sigprocmask(SIG_SETMASK, [], [pid 6385] <... futex resumed>) = 0 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6392] <... rseq resumed>) = 0 [pid 6388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6385] <... mmap resumed>) = 0x7eff81e8c000 [pid 6385] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6392] set_robust_list(0x7eff81ecd9a0, 24 [pid 6388] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... mprotect resumed>) = 0 [pid 6392] <... set_robust_list resumed>) = 0 [pid 6388] <... futex resumed>) = 0 [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6392] rt_sigprocmask(SIG_SETMASK, [], [pid 6390] <... munmap resumed>) = 0 [pid 6388] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6385] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6393 attached [pid 6392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6391] <... open resumed>) = 5 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6393] set_robust_list(0x5555571ca6a0, 24 [pid 6391] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] <... set_robust_list resumed>) = 0 [pid 6391] <... futex resumed>) = 0 [pid 6385] <... clone3 resumed> => {parent_tid=[6394]}, 88) = 6394 [pid 6393] chdir("./72" [pid 6391] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6394 attached [pid 6393] <... chdir resumed>) = 0 [pid 6392] memfd_create("syzkaller", 0 [pid 6390] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6393 [pid 6394] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6394] <... rseq resumed>) = 0 [pid 6393] <... prctl resumed>) = 0 [pid 6392] <... memfd_create resumed>) = 3 [pid 6390] <... openat resumed>) = 4 [pid 6394] set_robust_list(0x7eff81eac9a0, 24 [pid 6393] setpgid(0, 0 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6390] ioctl(4, LOOP_SET_FD, 3 [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6394] <... set_robust_list resumed>) = 0 [pid 6393] <... setpgid resumed>) = 0 [ 177.259992][ T6383] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.280054][ T6386] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.291543][ T6384] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6392] <... mmap resumed>) = 0x7eff79a00000 [pid 6385] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6394] rt_sigprocmask(SIG_SETMASK, [], [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6385] <... futex resumed>) = 0 [pid 6394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6393] <... openat resumed>) = 3 [pid 6385] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6394] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6393] write(3, "1000", 4 [pid 6392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6383] <... write resumed>) = 53248 [pid 6383] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [ 177.306870][ T6390] loop0: detected capacity change from 0 to 1024 [pid 6381] exit_group(0 [pid 6393] <... write resumed>) = 4 [pid 6389] <... futex resumed>) = ? [pid 6383] <... futex resumed>) = ? [pid 6381] <... exit_group resumed>) = ? [pid 6393] close(3 [pid 6392] <... write resumed>) = 524288 [pid 6390] <... ioctl resumed>) = 0 [pid 6389] +++ exited with 0 +++ [pid 6393] <... close resumed>) = 0 [pid 6392] munmap(0x7eff79a00000, 138412032 [pid 6390] close(3 [pid 6393] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6392] <... munmap resumed>) = 0 [pid 6393] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6390] <... close resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 6393] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6392] <... openat resumed>) = 4 [pid 6390] close(4 [pid 6393] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6392] ioctl(4, LOOP_SET_FD, 3 [pid 6390] <... close resumed>) = 0 [pid 6393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6390] mkdir("./file1", 0777 [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6383] +++ exited with 0 +++ [pid 6381] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6381, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6390] <... mkdir resumed>) = 0 [pid 6393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6390] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6393] <... mmap resumed>) = 0x7eff81ead000 [pid 5075] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6393] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6384] <... write resumed>) = 53248 [pid 5075] <... openat resumed>) = 3 [pid 6393] <... mprotect resumed>) = 0 [pid 6384] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] newfstatat(3, "", [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6384] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] exit_group(0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6393] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6390] <... mount resumed>) = 0 [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6392] <... ioctl resumed>) = 0 [pid 6391] <... futex resumed>) = ? [pid 6390] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6384] <... futex resumed>) = ? [pid 6382] <... exit_group resumed>) = ? [pid 5075] getdents64(3, ./strace-static-x86_64: Process 6395 attached [pid 6392] close(3 [pid 6391] +++ exited with 0 +++ [pid 6390] <... openat resumed>) = 3 [pid 6384] +++ exited with 0 +++ [pid 6382] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6395] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6393] <... clone3 resumed> => {parent_tid=[6395]}, 88) = 6395 [pid 6392] <... close resumed>) = 0 [pid 6390] chdir("./file1" [pid 5075] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] <... rseq resumed>) = 0 [pid 6393] rt_sigprocmask(SIG_SETMASK, [], [pid 6392] close(4 [pid 6390] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6395] set_robust_list(0x7eff81ecd9a0, 24 [pid 6394] <... open resumed>) = 5 [pid 6393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6392] <... close resumed>) = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6395] <... set_robust_list resumed>) = 0 [pid 6394] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] mkdir("./file1", 0777 [pid 6390] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 177.332524][ T6386] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.339844][ T6386] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.347579][ T6384] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.365214][ T6392] loop5: detected capacity change from 0 to 1024 [pid 6395] rt_sigprocmask(SIG_SETMASK, [], [pid 6394] <... futex resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 6390] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] unlink("./71/binderfs" [pid 6395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6394] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6392] <... mkdir resumed>) = 0 [pid 6390] <... futex resumed>) = 1 [pid 6387] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6390] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6387] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6387] <... futex resumed>) = 0 [pid 6390] creat("./file0", 000 [pid 6387] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6395] memfd_create("syzkaller", 0 [pid 6392] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6395] <... memfd_create resumed>) = 3 [pid 6392] <... mount resumed>) = 0 [pid 6390] <... creat resumed>) = 4 [pid 5075] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6392] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6390] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... openat resumed>) = 3 [pid 6390] <... futex resumed>) = 1 [pid 6387] <... futex resumed>) = 0 [pid 6395] <... mmap resumed>) = 0x7eff79a00000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6392] chdir("./file1" [pid 6390] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6387] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... chdir resumed>) = 0 [pid 6387] <... futex resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6392] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6387] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... openat resumed>) = 3 [pid 6392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] newfstatat(3, "", [pid 6392] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6392] creat("./file0", 000 [pid 6388] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6388] <... futex resumed>) = 0 [pid 6392] <... creat resumed>) = 4 [pid 6388] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] getdents64(3, [pid 6392] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6392] <... futex resumed>) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6392] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6388] <... futex resumed>) = 0 [pid 6388] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6392] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5072] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./71/binderfs") = 0 [ 177.415779][ T6386] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.454166][ T6386] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 6387] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6387] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6387] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6387] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6387] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6396]}, 88) = 6396 ./strace-static-x86_64: Process 6396 attached [pid 6387] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... umount2 resumed>) = 0 [pid 6396] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6396] <... rseq resumed>) = 0 [pid 6387] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6396] set_robust_list(0x7eff81eac9a0, 24 [pid 6387] <... futex resumed>) = 0 [pid 6396] <... set_robust_list resumed>) = 0 [pid 6387] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6386] <... write resumed>) = 53248 [pid 5072] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6396] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6386] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6386] <... futex resumed>) = 0 [pid 6385] exit_group(0 [pid 5075] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6385] <... exit_group resumed>) = ? [pid 5072] newfstatat(AT_FDCWD, "./71/file1", [pid 6394] <... futex resumed>) = ? [pid 6388] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 177.472293][ T6390] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.479748][ T6390] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.502752][ T6392] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6394] +++ exited with 0 +++ [pid 6388] <... futex resumed>) = 0 [pid 6385] +++ exited with 0 +++ [pid 5075] newfstatat(AT_FDCWD, "./71/file1", [pid 5072] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5074] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(3, "", [pid 5072] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] newfstatat(4, "", [pid 5074] getdents64(3, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] getdents64(4, [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./72/binderfs" [pid 5072] close(4 [pid 6388] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6388] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] rmdir("./71/file1" [pid 6395] <... write resumed>) = 524288 [pid 6388] <... mprotect resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 6395] munmap(0x7eff79a00000, 138412032 [pid 6388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] <... openat resumed>) = 4 [pid 6388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] newfstatat(4, "", [pid 6395] <... munmap resumed>) = 0 [pid 6388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6387] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./71"./strace-static-x86_64: Process 6397 attached [pid 6395] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6397] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6395] <... openat resumed>) = 4 [pid 6388] <... clone3 resumed> => {parent_tid=[6397]}, 88) = 6397 [pid 5075] getdents64(4, [pid 5072] <... rmdir resumed>) = 0 [pid 6397] <... rseq resumed>) = 0 [pid 6388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6397] set_robust_list(0x7eff81eac9a0, 24 [pid 6395] ioctl(4, LOOP_SET_FD, 3 [pid 6388] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(4, [pid 6388] <... futex resumed>) = 0 [pid 6396] <... open resumed>) = 5 [pid 5072] mkdir("./72", 0777 [pid 6396] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... mkdir resumed>) = 0 [pid 6396] <... futex resumed>) = 0 [ 177.522542][ T6390] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.530231][ T6390] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.540434][ T6392] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.558868][ T6392] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6396] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6397] <... set_robust_list resumed>) = 0 [pid 6388] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6397] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] close(4 [pid 6397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6397] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6395] <... ioctl resumed>) = 0 [pid 5075] rmdir("./71/file1") = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./72/file1", [pid 5075] getdents64(3, [pid 6395] close(3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6395] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6395] close(4 [pid 5075] close(3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6395] mkdir("./file1", 0777 [pid 5075] rmdir("./71" [pid 6397] <... open resumed>) = 5 [pid 5074] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6397] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... mkdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 177.571299][ T6395] loop2: detected capacity change from 0 to 1024 [ 177.586444][ T6390] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.591420][ T6392] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.615581][ T6390] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] getdents64(4, [pid 6397] <... futex resumed>) = 1 [pid 6395] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6390] <... write resumed>) = 53248 [pid 6388] <... futex resumed>) = 0 [pid 5075] mkdir("./72", 0777 [pid 6397] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6395] <... mount resumed>) = 0 [pid 6390] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6390] <... futex resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6390] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] <... openat resumed>) = 3 [pid 6387] exit_group(0) = ? [pid 6396] <... futex resumed>) = ? [pid 6395] chdir("./file1" [pid 6390] <... futex resumed>) = ? [pid 6396] +++ exited with 0 +++ [pid 6395] <... chdir resumed>) = 0 [pid 6390] +++ exited with 0 +++ [pid 6387] +++ exited with 0 +++ [pid 5074] getdents64(4, [pid 6395] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6387, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6395] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] close(4 [pid 6395] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 6395] <... futex resumed>) = 1 [pid 6393] <... futex resumed>) = 0 [pid 6393] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./72/file1" [pid 5071] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6393] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] creat("./file0", 000 [pid 6393] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] getdents64(3, [pid 5072] close(3 [pid 5071] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6395] <... creat resumed>) = 4 [pid 5074] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(3, "", [pid 6395] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6395] <... futex resumed>) = 1 [pid 6393] <... futex resumed>) = 0 [pid 6393] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6393] <... futex resumed>) = 0 [pid 5074] rmdir("./72" [pid 5071] getdents64(3, [pid 6393] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6398 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] mkdir("./73", 0777 [pid 5071] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6398 attached [pid 5074] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] set_robust_list(0x5555571ca6a0, 24 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./73/binderfs", [pid 6398] <... set_robust_list resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] unlink("./73/binderfs" [pid 6398] chdir("./72" [pid 5071] <... unlink resumed>) = 0 [pid 6398] <... chdir resumed>) = 0 [pid 5071] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 177.629377][ T6392] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.659482][ T6392] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6398] setpgid(0, 0) = 0 [pid 6392] <... write resumed>) = 53248 [pid 6392] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6388] exit_group(0 [pid 6397] <... futex resumed>) = ? [pid 6388] <... exit_group resumed>) = ? [pid 6392] +++ exited with 0 +++ [pid 6397] +++ exited with 0 +++ [pid 6388] +++ exited with 0 +++ [pid 6398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5076] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6393] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 6393] <... futex resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6393] <... mmap resumed>) = 0x7eff81e8c000 [pid 5076] getdents64(3, [pid 6393] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6398] <... openat resumed>) = 3 [pid 6393] <... mprotect resumed>) = 0 [pid 5076] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6393] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5071] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6398] write(3, "1000", 4 [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... write resumed>) = 4 [pid 6398] close(3 [pid 5075] close(3 [pid 6398] <... close resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6398] symlink("/dev/binderfs", "./binderfs" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./73/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] unlink("./72/binderfs" [pid 5071] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6398] <... symlink resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [ 177.727874][ T6395] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6399 [pid 5071] newfstatat(4, "", [pid 6393] <... clone3 resumed> => {parent_tid=[6400]}, 88) = 6400 [pid 5076] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6393] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... ioctl resumed>) = 0 [pid 5071] getdents64(4, [pid 6393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] close(3 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6400 attached [pid 6393] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 6400] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6393] <... futex resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6400] <... rseq resumed>) = 0 [pid 6398] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] close(4./strace-static-x86_64: Process 6399 attached [pid 6400] set_robust_list(0x7eff81eac9a0, 24 [pid 6398] <... futex resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6398] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6399] set_robust_list(0x5555571ca6a0, 24 [pid 6398] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6399] <... set_robust_list resumed>) = 0 [pid 6398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6400] <... set_robust_list resumed>) = 0 [pid 6399] chdir("./72" [pid 6398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] rmdir("./73/file1" [pid 6399] <... chdir resumed>) = 0 [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6400] rt_sigprocmask(SIG_SETMASK, [], [pid 6399] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6398] <... mmap resumed>) = 0x7eff81ead000 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6401 [pid 5071] <... rmdir resumed>) = 0 [pid 6400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6399] <... prctl resumed>) = 0 [pid 6398] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6400] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6399] setpgid(0, 0 [pid 5071] getdents64(3, [pid 6398] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6401 attached [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6401] set_robust_list(0x5555571ca6a0, 24 [pid 5071] close(3 [pid 6401] <... set_robust_list resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6401] chdir("./73" [pid 5071] rmdir("./73") = 0 [pid 5071] mkdir("./74", 0777) = 0 [pid 6401] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6401] <... prctl resumed>) = 0 [pid 6401] setpgid(0, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 6401] <... setpgid resumed>) = 0 [pid 6401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6401] <... openat resumed>) = 3 [pid 6398] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6401] write(3, "1000", 4) = 4 [pid 6401] close(3) = 0 [pid 6401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6401] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6399] <... setpgid resumed>) = 0 [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... clone3 resumed> => {parent_tid=[6402]}, 88) = 6402 [pid 5076] newfstatat(AT_FDCWD, "./72/file1", ./strace-static-x86_64: Process 6402 attached [pid 6399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6398] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6401] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6399] <... openat resumed>) = 3 [pid 6398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6402] <... rseq resumed>) = 0 [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6399] write(3, "1000", 4 [pid 6398] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 177.770196][ T6395] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.794218][ T6395] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.801534][ T6395] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6402] set_robust_list(0x7eff81ecd9a0, 24 [pid 6401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6399] <... write resumed>) = 4 [pid 6398] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6402] <... set_robust_list resumed>) = 0 [pid 6401] <... mmap resumed>) = 0x7eff81ead000 [pid 6399] close(3 [pid 6398] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] newfstatat(4, "", [pid 5071] <... ioctl resumed>) = 0 [pid 6402] rt_sigprocmask(SIG_SETMASK, [], [pid 6401] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6400] <... open resumed>) = 5 [pid 6399] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6400] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] symlink("/dev/binderfs", "./binderfs" [pid 5076] getdents64(4, [pid 6402] memfd_create("syzkaller", 0 [pid 6400] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6402] <... memfd_create resumed>) = 3 [pid 6401] <... mprotect resumed>) = 0 [pid 6400] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6399] <... symlink resumed>) = 0 [pid 5076] getdents64(4, [pid 6401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... close resumed>) = 0 [pid 6401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] rmdir("./72/file1") = 0 [pid 6401] <... clone3 resumed> => {parent_tid=[6403]}, 88) = 6403 ./strace-static-x86_64: Process 6403 attached [pid 6401] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] close(3 [pid 5076] getdents64(3, [pid 6403] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] <... close resumed>) = 0 [pid 6403] <... rseq resumed>) = 0 [pid 6402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6401] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6403] set_robust_list(0x7eff81ecd9a0, 24 [pid 6402] <... mmap resumed>) = 0x7eff79a00000 [pid 6401] <... futex resumed>) = 0 [pid 6399] <... futex resumed>) = 0 [pid 5076] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6403] <... set_robust_list resumed>) = 0 [pid 6401] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6399] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... close resumed>) = 0 [pid 6403] rt_sigprocmask(SIG_SETMASK, [], [pid 6399] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6399] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] rmdir("./72" [pid 6403] memfd_create("syzkaller", 0 [pid 6399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6404 attached [pid 6403] <... memfd_create resumed>) = 3 [pid 6399] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... rmdir resumed>) = 0 [pid 6404] set_robust_list(0x5555571ca6a0, 24 [pid 6403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6399] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] mkdir("./73", 0777 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6404 [pid 6404] <... set_robust_list resumed>) = 0 [pid 6403] <... mmap resumed>) = 0x7eff79a00000 [pid 6399] <... mprotect resumed>) = 0 [pid 6399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... mkdir resumed>) = 0 [pid 6404] chdir("./74") = 0 [pid 6399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6404] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6404] setpgid(0, 0 [pid 6399] <... clone3 resumed> => {parent_tid=[6405]}, 88) = 6405 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6404] <... setpgid resumed>) = 0 [ 177.870154][ T6395] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6399] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6405 attached [pid 6404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6402] <... write resumed>) = 524288 [pid 6399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6404] <... openat resumed>) = 3 [pid 6404] write(3, "1000", 4 [pid 6405] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6402] munmap(0x7eff79a00000, 138412032 [pid 6399] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] <... rseq resumed>) = 0 [pid 6405] set_robust_list(0x7eff81ecd9a0, 24 [pid 6404] <... write resumed>) = 4 [pid 6399] <... futex resumed>) = 0 [pid 6405] <... set_robust_list resumed>) = 0 [pid 6404] close(3 [pid 6399] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6405] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] <... close resumed>) = 0 [pid 6405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6402] <... munmap resumed>) = 0 [pid 6404] symlink("/dev/binderfs", "./binderfs" [pid 6405] memfd_create("syzkaller", 0 [pid 6404] <... symlink resumed>) = 0 [pid 6402] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6404] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6402] <... openat resumed>) = 4 [pid 6404] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6405] <... memfd_create resumed>) = 3 [pid 6404] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6395] <... write resumed>) = 53248 [pid 6404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6403] <... write resumed>) = 524288 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6402] ioctl(4, LOOP_SET_FD, 3 [pid 6395] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6393] exit_group(0 [pid 6404] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6400] <... futex resumed>) = ? [pid 6393] <... exit_group resumed>) = ? [pid 6404] <... mprotect resumed>) = 0 [pid 6405] <... mmap resumed>) = 0x7eff79a00000 [pid 6404] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6400] +++ exited with 0 +++ [pid 6404] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6403] munmap(0x7eff79a00000, 138412032./strace-static-x86_64: Process 6406 attached [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6406] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6404] <... clone3 resumed> => {parent_tid=[6406]}, 88) = 6406 [pid 6406] <... rseq resumed>) = 0 [pid 6404] rt_sigprocmask(SIG_SETMASK, [], [pid 6406] set_robust_list(0x7eff81ecd9a0, 24 [pid 6404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6406] <... set_robust_list resumed>) = 0 [pid 6404] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... munmap resumed>) = 0 [pid 6406] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] <... futex resumed>) = 0 [pid 6406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6404] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6395] +++ exited with 0 +++ [pid 6393] +++ exited with 0 +++ [pid 6406] memfd_create("syzkaller", 0 [pid 6403] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6402] <... ioctl resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 6406] <... memfd_create resumed>) = 3 [pid 6402] close(3 [pid 5073] <... restart_syscall resumed>) = 0 [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6403] <... openat resumed>) = 4 [pid 6402] <... close resumed>) = 0 [pid 6406] <... mmap resumed>) = 0x7eff79a00000 [ 177.913154][ T6395] hfsplus: request for non-existent node 16777216 in B*Tree [ 177.937501][ T6402] loop1: detected capacity change from 0 to 1024 [pid 6403] ioctl(4, LOOP_SET_FD, 3 [pid 6402] close(4 [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6405] <... write resumed>) = 524288 [pid 6402] <... close resumed>) = 0 [pid 5073] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6402] mkdir("./file1", 0777 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] close(3 [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6402] <... mkdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6407 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6405] munmap(0x7eff79a00000, 138412032 [pid 6402] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, ""./strace-static-x86_64: Process 6407 attached [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6407] set_robust_list(0x5555571ca6a0, 24 [pid 6405] <... munmap resumed>) = 0 [pid 6403] <... ioctl resumed>) = 0 [pid 5073] unlink("./72/binderfs" [pid 6407] <... set_robust_list resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5073] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] chdir("./73" [pid 6403] close(3) = 0 [pid 6403] close(4 [pid 6407] <... chdir resumed>) = 0 [pid 6403] <... close resumed>) = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6403] mkdir("./file1", 0777 [pid 6407] <... prctl resumed>) = 0 [pid 6407] setpgid(0, 0 [pid 6406] <... write resumed>) = 524288 [pid 6403] <... mkdir resumed>) = 0 [pid 6407] <... setpgid resumed>) = 0 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6406] munmap(0x7eff79a00000, 138412032 [pid 6407] <... openat resumed>) = 3 [pid 6402] <... mount resumed>) = 0 [pid 6402] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 177.971884][ T6403] loop3: detected capacity change from 0 to 1024 [pid 6406] <... munmap resumed>) = 0 [pid 6405] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6402] chdir("./file1") = 0 [pid 6405] <... openat resumed>) = 4 [pid 6403] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6402] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6407] write(3, "1000", 4 [pid 6405] ioctl(4, LOOP_SET_FD, 3 [pid 6402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6407] <... write resumed>) = 4 [pid 6406] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6402] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] close(3 [pid 6406] <... openat resumed>) = 4 [pid 6402] <... futex resumed>) = 1 [pid 6407] <... close resumed>) = 0 [pid 6406] ioctl(4, LOOP_SET_FD, 3 [pid 6402] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... futex resumed>) = 0 [pid 6407] symlink("/dev/binderfs", "./binderfs" [pid 6402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6398] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6407] <... symlink resumed>) = 0 [pid 6402] creat("./file0", 000 [pid 5073] <... umount2 resumed>) = 0 [pid 6402] <... creat resumed>) = 4 [pid 6405] <... ioctl resumed>) = 0 [pid 5073] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] close(3 [pid 6403] <... mount resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] <... futex resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./72/file1", [pid 6407] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6405] <... close resumed>) = 0 [pid 6407] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6405] close(4 [pid 6402] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6403] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6402] <... futex resumed>) = 1 [pid 6398] <... futex resumed>) = 0 [pid 5073] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6402] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6398] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] <... mmap resumed>) = 0x7eff81ead000 [pid 6405] <... close resumed>) = 0 [pid 6403] <... openat resumed>) = 3 [pid 6398] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6403] chdir("./file1" [pid 6407] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6403] <... chdir resumed>) = 0 [pid 6407] <... mprotect resumed>) = 0 [pid 6405] mkdir("./file1", 0777 [pid 5073] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6406] <... ioctl resumed>) = 0 [pid 6403] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6407] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6406] close(3 [pid 6403] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6405] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6406] <... close resumed>) = 0 [pid 6405] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6403] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] newfstatat(4, "", [pid 6406] close(4 [pid 6403] <... futex resumed>) = 1 [ 178.039934][ T6405] loop4: detected capacity change from 0 to 1024 [ 178.049546][ T6406] loop0: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 6408 attached [pid 6407] <... clone3 resumed> => {parent_tid=[6408]}, 88) = 6408 [pid 6406] <... close resumed>) = 0 [pid 6403] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6401] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6408] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6407] rt_sigprocmask(SIG_SETMASK, [], [pid 6406] mkdir("./file1", 0777 [pid 6403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6401] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] getdents64(4, [pid 6408] <... rseq resumed>) = 0 [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6406] <... mkdir resumed>) = 0 [pid 6403] creat("./file0", 000 [pid 6401] <... futex resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6408] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6407] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] <... creat resumed>) = 4 [pid 6401] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] getdents64(4, [pid 6408] rt_sigprocmask(SIG_SETMASK, [], [pid 6407] <... futex resumed>) = 0 [pid 6408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6407] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4 [pid 6408] memfd_create("syzkaller", 0 [pid 6406] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6403] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 6403] <... futex resumed>) = 1 [pid 6401] <... futex resumed>) = 0 [pid 6408] <... memfd_create resumed>) = 3 [pid 6405] <... mount resumed>) = 0 [pid 6401] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] rmdir("./72/file1" [pid 6403] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6401] <... futex resumed>) = 0 [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6405] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6401] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... rmdir resumed>) = 0 [ 178.099389][ T6402] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] getdents64(3, [pid 6408] <... mmap resumed>) = 0x7eff79a00000 [pid 6405] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6405] chdir("./file1" [pid 6398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6398] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] close(3 [pid 6405] <... chdir resumed>) = 0 [pid 6398] <... futex resumed>) = 0 [pid 6408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6405] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... close resumed>) = 0 [pid 6398] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] rmdir("./72" [pid 6398] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... rmdir resumed>) = 0 [pid 6398] <... mprotect resumed>) = 0 [pid 6406] <... mount resumed>) = 0 [pid 5073] mkdir("./73", 0777 [pid 6398] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6406] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6398] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6406] chdir("./file1" [pid 6398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6406] <... chdir resumed>) = 0 [pid 6401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6406] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6401] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] <... clone3 resumed> => {parent_tid=[6409]}, 88) = 6409 ./strace-static-x86_64: Process 6409 attached [pid 6406] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6405] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] <... futex resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6406] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6409] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6406] <... futex resumed>) = 1 [pid 6405] <... futex resumed>) = 1 [pid 6401] <... mmap resumed>) = 0x7eff81e8c000 [pid 6399] <... futex resumed>) = 0 [pid 6398] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... openat resumed>) = 3 [pid 6399] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6409] <... rseq resumed>) = 0 [pid 6405] creat("./file0", 000 [pid 6399] <... futex resumed>) = 0 [pid 6409] set_robust_list(0x7eff81eac9a0, 24 [pid 6406] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6405] <... creat resumed>) = 4 [pid 6404] <... futex resumed>) = 0 [pid 6401] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6399] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6398] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... set_robust_list resumed>) = 0 [pid 6405] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] <... mprotect resumed>) = 0 [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6398] <... futex resumed>) = 0 [pid 6409] rt_sigprocmask(SIG_SETMASK, [], [pid 6405] <... futex resumed>) = 0 [pid 6401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6399] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6405] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6404] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6409] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6406] <... futex resumed>) = 0 [pid 6404] <... futex resumed>) = 1 [pid 6401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6406] creat("./file0", 000 [pid 6404] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6410 attached [pid 6406] <... creat resumed>) = 4 [pid 6401] <... clone3 resumed> => {parent_tid=[6410]}, 88) = 6410 [pid 6410] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6406] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] rt_sigprocmask(SIG_SETMASK, [], [pid 6410] <... rseq resumed>) = 0 [ 178.146628][ T6403] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.154084][ T6402] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.161845][ T6402] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.186742][ T6403] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6406] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6410] set_robust_list(0x7eff81eac9a0, 24 [pid 6404] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6399] <... futex resumed>) = 0 [pid 6410] <... set_robust_list resumed>) = 0 [pid 6404] <... futex resumed>) = 0 [pid 6401] <... futex resumed>) = 0 [pid 6410] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6401] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6410] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6406] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6399] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6408] <... write resumed>) = 524288 [pid 6398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... ioctl resumed>) = 0 [pid 6410] <... open resumed>) = 5 [ 178.206910][ T6402] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.209878][ T6405] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.221379][ T6403] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.242794][ T6403] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6410] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6401] <... futex resumed>) = 0 [pid 6410] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6404] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6404] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6408] munmap(0x7eff79a00000, 138412032 [pid 6404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] close(3 [pid 6399] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 6399] <... futex resumed>) = 0 [ 178.255691][ T6402] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.263660][ T6406] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6408] <... munmap resumed>) = 0 [pid 6399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6399] <... mmap resumed>) = 0x7eff81e8c000 [ 178.298026][ T6403] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.312665][ T6402] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.322342][ T6406] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.330073][ T6406] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.332438][ T6405] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6408] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6399] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6411 attached ./strace-static-x86_64: Process 6412 attached [pid 6409] <... open resumed>) = 5 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6411 [pid 6411] set_robust_list(0x5555571ca6a0, 24 [pid 6412] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6409] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] <... openat resumed>) = 4 [pid 6404] <... clone3 resumed> => {parent_tid=[6412]}, 88) = 6412 [pid 6402] <... write resumed>) = 53248 [pid 6399] <... mprotect resumed>) = 0 [pid 6411] <... set_robust_list resumed>) = 0 [pid 6402] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] chdir("./73" [pid 6402] <... futex resumed>) = 0 [pid 6411] <... chdir resumed>) = 0 [pid 6402] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6398] exit_group(0 [pid 6411] setpgid(0, 0) = 0 [pid 6398] <... exit_group resumed>) = ? [pid 6409] <... futex resumed>) = ? [pid 6404] rt_sigprocmask(SIG_SETMASK, [], [pid 6402] <... futex resumed>) = ? [pid 6412] <... rseq resumed>) = 0 [pid 6408] ioctl(4, LOOP_SET_FD, 3 [pid 6412] set_robust_list(0x7eff81eac9a0, 24 [pid 6409] +++ exited with 0 +++ [pid 6404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6399] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6412] <... set_robust_list resumed>) = 0 [pid 6404] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6402] +++ exited with 0 +++ [pid 6399] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6398] +++ exited with 0 +++ [pid 6411] <... openat resumed>) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6398, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6399] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6404] <... futex resumed>) = 0 [ 178.353116][ T6403] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.368230][ T6406] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6412] rt_sigprocmask(SIG_SETMASK, [], [pid 6411] write(3, "1000", 4 [pid 6412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6411] <... write resumed>) = 4 [pid 6411] close(3 [pid 6412] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6404] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... close resumed>) = 0 [pid 6411] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6413 attached [pid 6408] <... ioctl resumed>) = 0 [pid 6399] <... clone3 resumed> => {parent_tid=[6413]}, 88) = 6413 [pid 6399] rt_sigprocmask(SIG_SETMASK, [], [pid 6413] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6408] close(3 [pid 6399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6413] <... rseq resumed>) = 0 [pid 6412] <... open resumed>) = 5 [pid 6408] <... close resumed>) = 0 [pid 6399] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] set_robust_list(0x7eff81eac9a0, 24 [pid 6412] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] close(4 [pid 6413] <... set_robust_list resumed>) = 0 [pid 6412] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6413] rt_sigprocmask(SIG_SETMASK, [], [pid 6412] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] <... close resumed>) = 0 [pid 6413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6411] <... symlink resumed>) = 0 [pid 6408] mkdir("./file1", 0777 [pid 6403] <... write resumed>) = 53248 [pid 6413] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6411] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6403] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6411] <... futex resumed>) = 0 [pid 6403] <... futex resumed>) = 0 [pid 6411] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6408] <... mkdir resumed>) = 0 [pid 6403] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6399] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6411] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6401] exit_group(0 [pid 5072] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6410] <... futex resumed>) = ? [pid 6403] <... futex resumed>) = ? [pid 6401] <... exit_group resumed>) = ? [pid 6411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6410] +++ exited with 0 +++ [pid 5072] <... openat resumed>) = 3 [pid 6411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 178.394405][ T6408] loop5: detected capacity change from 0 to 1024 [ 178.407158][ T6405] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.433121][ T6406] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6408] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6403] +++ exited with 0 +++ [pid 6401] +++ exited with 0 +++ [pid 6399] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... mmap resumed>) = 0x7eff81ead000 [pid 5072] newfstatat(3, "", [pid 6411] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6401, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6411] <... mprotect resumed>) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6411] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... restart_syscall resumed>) = 0 [pid 6411] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5072] getdents64(3, [pid 6411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6411] <... clone3 resumed> => {parent_tid=[6414]}, 88) = 6414 [pid 5072] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6411] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6408] <... mount resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] unlink("./72/binderfs" [pid 6408] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6414 attached [pid 6411] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... unlink resumed>) = 0 [pid 6408] <... openat resumed>) = 3 [pid 6414] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6413] <... open resumed>) = 5 [pid 6411] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6408] chdir("./file1" [pid 6414] <... rseq resumed>) = 0 [pid 6413] <... futex resumed>) = 1 [pid 6411] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6408] <... chdir resumed>) = 0 [pid 6399] <... futex resumed>) = 0 [pid 5074] newfstatat(3, "", [pid 6414] set_robust_list(0x7eff81ecd9a0, 24 [pid 6408] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6414] <... set_robust_list resumed>) = 0 [pid 6408] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 178.441122][ T6406] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.453830][ T6405] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] getdents64(3, [pid 6414] rt_sigprocmask(SIG_SETMASK, [], [pid 6413] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6408] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... write resumed>) = 53248 [pid 6406] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] exit_group(0 [pid 6408] <... futex resumed>) = 1 [pid 6406] <... futex resumed>) = 1 [pid 6412] <... futex resumed>) = ? [pid 6408] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] <... exit_group resumed>) = ? [pid 6406] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ [pid 6414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6407] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6414] memfd_create("syzkaller", 0 [pid 6407] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6414] <... memfd_create resumed>) = 3 [pid 6408] <... futex resumed>) = 0 [pid 6407] <... futex resumed>) = 1 [pid 6404] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6408] creat("./file0", 000 [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6408] <... creat resumed>) = 4 [pid 6407] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6404, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6414] <... mmap resumed>) = 0x7eff79a00000 [pid 6408] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6408] <... futex resumed>) = 0 [pid 6407] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] unlink("./73/binderfs" [pid 6408] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6407] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6407] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 178.495487][ T6405] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6414] <... write resumed>) = 524288 [pid 5074] <... umount2 resumed>) = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5072] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./72/file1", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./73/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./74/binderfs" [pid 5072] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... openat resumed>) = 4 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... unlink resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] newfstatat(4, "", [pid 6407] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, [pid 5072] getdents64(4, [pid 6414] munmap(0x7eff79a00000, 138412032 [pid 6407] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6414] <... munmap resumed>) = 0 [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] getdents64(4, [pid 5072] getdents64(4, [pid 6414] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6407] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6414] <... openat resumed>) = 4 [ 178.541152][ T6405] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.564756][ T6408] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6407] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6414] ioctl(4, LOOP_SET_FD, 3 [pid 6407] <... mprotect resumed>) = 0 [pid 5074] close(4 [pid 5072] close(4 [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6405] <... write resumed>) = 53248 [pid 5074] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5074] rmdir("./73/file1" [pid 5072] rmdir("./72/file1" [pid 5071] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6405] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6405] <... futex resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 6405] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] <... clone3 resumed> => {parent_tid=[6415]}, 88) = 6415 [pid 6399] exit_group(0 [pid 5072] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./74/file1", [pid 6407] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6415 attached [pid 6413] <... futex resumed>) = ? [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6405] <... futex resumed>) = ? [pid 6399] <... exit_group resumed>) = ? [pid 5074] getdents64(3, [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6415] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6407] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] +++ exited with 0 +++ [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5071] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] <... rseq resumed>) = 0 [pid 6407] <... futex resumed>) = 0 [pid 5074] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] set_robust_list(0x7eff81eac9a0, 24 [pid 6407] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6415] <... set_robust_list resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] rmdir("./72" [pid 6415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6414] <... ioctl resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6415] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6414] close(3) = 0 [pid 5074] rmdir("./73" [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6414] close(4) = 0 [pid 6414] mkdir("./file1", 0777) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] mkdir("./73", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] mkdir("./74", 0777 [pid 5071] getdents64(4, [pid 6414] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6413] +++ exited with 0 +++ [pid 6399] +++ exited with 0 +++ [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] getdents64(4, [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6399, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] <... openat resumed>) = 3 [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... restart_syscall resumed>) = 0 [ 178.600172][ T6414] loop2: detected capacity change from 0 to 1024 [ 178.611161][ T6408] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] close(4 [pid 6414] <... mount resumed>) = 0 [pid 6414] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./74/file1" [pid 6414] <... openat resumed>) = 3 [pid 6414] chdir("./file1" [pid 5075] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... rmdir resumed>) = 0 [pid 6414] <... chdir resumed>) = 0 [pid 6414] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6414] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6411] <... futex resumed>) = 0 [pid 6411] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6411] <... futex resumed>) = 0 [pid 6411] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6414] creat("./file0", 000) = 4 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] close(3 [pid 6415] <... open resumed>) = 5 [pid 6414] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... close resumed>) = 0 [pid 6415] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6414] <... futex resumed>) = 1 [pid 6411] <... futex resumed>) = 0 [pid 5071] rmdir("./74" [pid 6415] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6411] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6414] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6411] <... futex resumed>) = 0 [pid 6411] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] newfstatat(3, "", [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [ 178.652796][ T6408] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.663309][ T6408] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.687971][ T6408] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] mkdir("./75", 0777 [pid 5075] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 5071] <... mkdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5072] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 5075] unlink("./72/binderfs" [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] <... unlink resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6416 [pid 5071] <... ioctl resumed>) = 0 [pid 5075] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(3./strace-static-x86_64: Process 6416 attached ) = 0 [pid 6416] set_robust_list(0x5555571ca6a0, 24 [pid 6411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6411] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6417 [pid 6411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6411] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6417 attached [pid 6416] <... set_robust_list resumed>) = 0 [pid 6411] <... mprotect resumed>) = 0 [pid 6417] set_robust_list(0x5555571ca6a0, 24 [pid 6416] chdir("./73" [pid 6411] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6417] <... set_robust_list resumed>) = 0 [pid 6416] <... chdir resumed>) = 0 [pid 6417] chdir("./75" [pid 6416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6411] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6417] <... chdir resumed>) = 0 [pid 6416] <... prctl resumed>) = 0 [pid 6411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6416] setpgid(0, 0) = 0 [pid 6411] <... clone3 resumed> => {parent_tid=[6418]}, 88) = 6418 [pid 6411] rt_sigprocmask(SIG_SETMASK, [], [pid 6416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] <... prctl resumed>) = 0 [pid 6416] <... openat resumed>) = 3 [pid 6411] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... ioctl resumed>) = 0 [pid 6416] write(3, "1000", 4 [pid 6411] <... futex resumed>) = 0 [pid 6417] setpgid(0, 0 [pid 6416] <... write resumed>) = 4 [pid 6411] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6417] <... setpgid resumed>) = 0 [pid 6416] close(3./strace-static-x86_64: Process 6418 attached [pid 5074] close(3 [pid 6418] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 5074] <... close resumed>) = 0 [ 178.701684][ T6414] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.729010][ T6408] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.730164][ T6414] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6418] set_robust_list(0x7eff81eac9a0, 24 [pid 6408] <... write resumed>) = 53248 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6418] <... set_robust_list resumed>) = 0 [pid 6418] rt_sigprocmask(SIG_SETMASK, [], [pid 6416] <... close resumed>) = 0 [pid 6408] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6408] <... futex resumed>) = 0 [pid 6407] exit_group(0 [pid 6418] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6415] <... futex resumed>) = ? [pid 6407] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6419 attached [pid 6417] <... openat resumed>) = 3 [pid 6416] symlink("/dev/binderfs", "./binderfs" [pid 6415] +++ exited with 0 +++ [pid 6419] set_robust_list(0x5555571ca6a0, 24 [pid 6416] <... symlink resumed>) = 0 [pid 6419] <... set_robust_list resumed>) = 0 [pid 6419] chdir("./74") = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6419 [pid 6419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6419] setpgid(0, 0) = 0 [pid 6419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6408] +++ exited with 0 +++ [pid 6407] +++ exited with 0 +++ [pid 6416] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6407, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6416] <... futex resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6416] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... restart_syscall resumed>) = 0 [pid 6416] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6419] write(3, "1000", 4 [pid 5076] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6419] close(3 [pid 6416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6419] <... close resumed>) = 0 [pid 6417] write(3, "1000", 4 [pid 6416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./73/binderfs", [pid 6411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./73/binderfs" [pid 6419] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... unlink resumed>) = 0 [pid 6419] <... symlink resumed>) = 0 [pid 5076] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... write resumed>) = 4 [pid 6416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6417] close(3 [pid 6419] <... futex resumed>) = 0 [pid 6419] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6417] <... close resumed>) = 0 [pid 6416] <... mmap resumed>) = 0x7eff81ead000 [pid 6417] symlink("/dev/binderfs", "./binderfs" [pid 6416] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6419] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6416] <... mprotect resumed>) = 0 [pid 6419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] <... symlink resumed>) = 0 [pid 6416] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6416] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6419] <... mmap resumed>) = 0x7eff81ead000 [pid 6416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6419] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6419] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6420 attached [pid 6417] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... clone3 resumed> => {parent_tid=[6420]}, 88) = 6420 [pid 6416] rt_sigprocmask(SIG_SETMASK, [], [pid 6420] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6417] <... futex resumed>) = 0 [pid 6416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6420] <... rseq resumed>) = 0 [pid 6417] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [ 178.803062][ T6414] hfsplus: request for non-existent node 16777216 in B*Tree [ 178.810661][ T6414] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6416] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] set_robust_list(0x7eff81ecd9a0, 24 [pid 6419] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6417] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6416] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6419] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6416] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6419] <... clone3 resumed> => {parent_tid=[6421]}, 88) = 6421 [pid 6419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6421 attached [pid 6419] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6419] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./73/file1", [pid 6421] <... rseq resumed>) = 0 [pid 6419] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6421] set_robust_list(0x7eff81ecd9a0, 24 [pid 5076] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] rt_sigprocmask(SIG_SETMASK, [], [pid 6420] <... set_robust_list resumed>) = 0 [pid 6418] <... open resumed>) = 5 [pid 6417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6420] rt_sigprocmask(SIG_SETMASK, [], [pid 6418] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6421] memfd_create("syzkaller", 0 [pid 6420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6418] <... futex resumed>) = 0 [pid 6417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] newfstatat(AT_FDCWD, "./72/file1", [pid 6421] <... memfd_create resumed>) = 3 [pid 6420] memfd_create("syzkaller", 0 [pid 6418] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6417] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6421] <... mmap resumed>) = 0x7eff79a00000 [pid 6420] <... memfd_create resumed>) = 3 [pid 6417] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6417] <... mprotect resumed>) = 0 [pid 5075] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] <... mmap resumed>) = 0x7eff79a00000 [pid 6417] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6417] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6422 attached [pid 6421] <... write resumed>) = 524288 [pid 6420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6422] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6417] <... clone3 resumed> => {parent_tid=[6422]}, 88) = 6422 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 4 [pid 6422] set_robust_list(0x7eff81ecd9a0, 24 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] newfstatat(4, "", [pid 6422] <... set_robust_list resumed>) = 0 [pid 6417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6422] rt_sigprocmask(SIG_SETMASK, [], [pid 6417] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] <... futex resumed>) = 0 [pid 5075] getdents64(4, [pid 6422] memfd_create("syzkaller", 0 [pid 6417] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 178.887657][ T6414] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] getdents64(4, [pid 6422] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] close(4) = 0 [pid 5076] rmdir("./73/file1") = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6420] <... write resumed>) = 524288 [pid 5076] close(3) = 0 [pid 5076] rmdir("./73" [pid 6422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] getdents64(4, [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6422] <... mmap resumed>) = 0x7eff79a00000 [pid 5075] close(4) = 0 [pid 5075] rmdir("./72/file1" [pid 5076] mkdir("./74", 0777 [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 6421] munmap(0x7eff79a00000, 138412032 [pid 6422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6421] <... munmap resumed>) = 0 [pid 6420] munmap(0x7eff79a00000, 138412032 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./72") = 0 [pid 6414] <... write resumed>) = 53248 [pid 6414] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6411] exit_group(0 [pid 6418] <... futex resumed>) = ? [pid 6411] <... exit_group resumed>) = ? [pid 6418] +++ exited with 0 +++ [pid 6421] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6420] <... munmap resumed>) = 0 [ 178.935477][ T6414] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6421] <... openat resumed>) = 4 [pid 6414] +++ exited with 0 +++ [pid 6411] +++ exited with 0 +++ [pid 5075] mkdir("./73", 0777 [pid 6421] ioctl(4, LOOP_SET_FD, 3 [pid 6420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... mkdir resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6411, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6420] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./73/binderfs") = 0 [pid 5073] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6421] <... ioctl resumed>) = 0 [pid 6421] close(3 [pid 6422] <... write resumed>) = 524288 [pid 6421] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 6420] <... ioctl resumed>) = 0 [pid 6421] close(4 [pid 6420] close(3 [pid 6421] <... close resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6422] munmap(0x7eff79a00000, 138412032 [pid 6421] mkdir("./file1", 0777 [pid 6420] <... close resumed>) = 0 [pid 5075] close(3 [pid 5073] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] close(4 [pid 5075] <... close resumed>) = 0 [pid 6422] <... munmap resumed>) = 0 [pid 6421] <... mkdir resumed>) = 0 [pid 6420] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./73/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 178.981159][ T6421] loop3: detected capacity change from 0 to 1024 [ 178.991272][ T6420] loop1: detected capacity change from 0 to 1024 [pid 6422] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6421] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6420] mkdir("./file1", 0777 [pid 5073] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6422] <... openat resumed>) = 4 [pid 6420] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6422] ioctl(4, LOOP_SET_FD, 3 [pid 5073] getdents64(4, [pid 6422] <... ioctl resumed>) = 0 [pid 6420] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6423 attached [pid 6421] <... mount resumed>) = 0 [pid 5076] close(3 [pid 6421] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] getdents64(4, [pid 6423] set_robust_list(0x5555571ca6a0, 24 [pid 6421] <... openat resumed>) = 3 [pid 5076] <... close resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6423 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6423] <... set_robust_list resumed>) = 0 [pid 6423] chdir("./73" [pid 6421] chdir("./file1" [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(4 [pid 6423] <... chdir resumed>) = 0 [pid 6423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6421] <... chdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 6423] <... prctl resumed>) = 0 [pid 6421] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6423] setpgid(0, 0 [pid 5073] rmdir("./73/file1" [pid 6423] <... setpgid resumed>) = 0 [pid 6421] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6420] <... mount resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6421] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] getdents64(3, [pid 6421] <... futex resumed>) = 1 [pid 6420] <... openat resumed>) = 3 [pid 6419] <... futex resumed>) = 0 [pid 6423] <... openat resumed>) = 3 [pid 6421] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6419] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6419] <... futex resumed>) = 0 [pid 5073] close(3./strace-static-x86_64: Process 6424 attached [pid 6423] write(3, "1000", 4 [pid 6421] creat("./file0", 000 [pid 6420] chdir("./file1" [pid 6423] <... write resumed>) = 4 [pid 6424] set_robust_list(0x5555571ca6a0, 24 [pid 6423] close(3 [pid 6421] <... creat resumed>) = 4 [pid 6419] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... close resumed>) = 0 [pid 6423] <... close resumed>) = 0 [pid 6423] symlink("/dev/binderfs", "./binderfs" [pid 6424] <... set_robust_list resumed>) = 0 [pid 6422] close(3 [pid 6421] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6424 [pid 5073] rmdir("./73" [pid 6424] chdir("./74" [pid 6422] <... close resumed>) = 0 [pid 6421] <... futex resumed>) = 1 [pid 6419] <... futex resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6422] close(4 [pid 6421] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6419] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] mkdir("./74", 0777 [pid 6422] <... close resumed>) = 0 [pid 6419] <... futex resumed>) = 0 [pid 6423] <... symlink resumed>) = 0 [pid 6422] mkdir("./file1", 0777 [pid 6419] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... mkdir resumed>) = 0 [pid 6423] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... mkdir resumed>) = 0 [pid 6424] <... chdir resumed>) = 0 [pid 6423] <... futex resumed>) = 0 [pid 6420] <... chdir resumed>) = 0 [pid 6423] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6422] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6420] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 179.042397][ T6422] loop0: detected capacity change from 0 to 1024 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6423] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6420] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... openat resumed>) = 3 [pid 6424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6424] setpgid(0, 0) = 0 [pid 6424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6424] write(3, "1000", 4) = 4 [pid 6424] close(3) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6420] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6424] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6420] <... futex resumed>) = 1 [pid 6416] <... futex resumed>) = 0 [pid 6424] <... futex resumed>) = 0 [pid 6416] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6420] creat("./file0", 000 [pid 6424] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6423] <... mmap resumed>) = 0x7eff81ead000 [pid 6420] <... creat resumed>) = 4 [pid 6416] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6424] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6420] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6423] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6420] <... futex resumed>) = 1 [pid 6416] <... futex resumed>) = 0 [pid 6424] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6416] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6424] <... mprotect resumed>) = 0 [pid 6423] <... mprotect resumed>) = 0 [pid 6416] <... futex resumed>) = 0 [pid 6424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6416] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6422] <... mount resumed>) = 0 [pid 6419] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6422] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6419] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6424] <... clone3 resumed> => {parent_tid=[6425]}, 88) = 6425 [pid 6423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6422] <... openat resumed>) = 3 [pid 6419] <... futex resumed>) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], [pid 6422] chdir("./file1" [pid 6419] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6426 attached [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6422] <... chdir resumed>) = 0 [pid 6419] <... mmap resumed>) = 0x7eff81e8c000 [pid 6426] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6424] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6419] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6426] <... rseq resumed>) = 0 [pid 6424] <... futex resumed>) = 0 [pid 6423] <... clone3 resumed> => {parent_tid=[6426]}, 88) = 6426 [pid 6422] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6419] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6425 attached [pid 6426] set_robust_list(0x7eff81ecd9a0, 24 [pid 6424] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6422] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6419] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6426] <... set_robust_list resumed>) = 0 [pid 6425] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6423] rt_sigprocmask(SIG_SETMASK, [], [pid 6422] <... futex resumed>) = 1 [pid 6419] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6426] rt_sigprocmask(SIG_SETMASK, [], [pid 6425] <... rseq resumed>) = 0 [pid 6423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6422] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6419] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6427 attached [pid 6426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6425] set_robust_list(0x7eff81ecd9a0, 24 [pid 6423] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... futex resumed>) = 0 [pid 6427] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6426] memfd_create("syzkaller", 0 [pid 6425] <... set_robust_list resumed>) = 0 [pid 6419] <... clone3 resumed> => {parent_tid=[6427]}, 88) = 6427 [ 179.104273][ T6421] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.111608][ T6421] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6423] <... futex resumed>) = 0 [pid 6417] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... rseq resumed>) = 0 [pid 6426] <... memfd_create resumed>) = 3 [pid 6425] rt_sigprocmask(SIG_SETMASK, [], [pid 6419] rt_sigprocmask(SIG_SETMASK, [], [pid 6425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6425] memfd_create("syzkaller", 0 [pid 6419] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6419] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6427] set_robust_list(0x7eff81eac9a0, 24 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6425] <... memfd_create resumed>) = 3 [pid 6423] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6422] <... futex resumed>) = 0 [pid 6417] <... futex resumed>) = 1 [pid 6427] <... set_robust_list resumed>) = 0 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6422] creat("./file0", 000 [pid 6427] rt_sigprocmask(SIG_SETMASK, [], [pid 6426] <... mmap resumed>) = 0x7eff79a00000 [pid 6425] <... mmap resumed>) = 0x7eff79a00000 [pid 6422] <... creat resumed>) = 4 [pid 6417] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... ioctl resumed>) = 0 [pid 6427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6422] <... futex resumed>) = 1 [ 179.165195][ T6421] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.167458][ T6420] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.198691][ T28] kauditd_printk_skb: 21 callbacks suppressed [pid 6426] <... write resumed>) = 524288 [pid 6419] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6417] <... futex resumed>) = 0 [pid 6416] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6425] <... write resumed>) = 524288 [pid 6422] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6417] <... futex resumed>) = 0 [pid 6422] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6417] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6416] <... futex resumed>) = 0 [pid 6416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6416] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5073] close(3 [ 179.198713][ T28] audit: type=1800 audit(1708423256.815:445): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 179.210450][ T6420] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.241025][ T6421] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6425] munmap(0x7eff79a00000, 138412032 [pid 6426] munmap(0x7eff79a00000, 138412032 [pid 6425] <... munmap resumed>) = 0 [pid 6416] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... close resumed>) = 0 [pid 6416] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6427] <... open resumed>) = 5 [pid 6427] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6428 attached [pid 6427] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6425] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6428] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6425] <... openat resumed>) = 4 [pid 6428] set_robust_list(0x7eff81eac9a0, 24 [pid 6425] ioctl(4, LOOP_SET_FD, 3 [pid 6428] <... set_robust_list resumed>) = 0 [pid 6425] <... ioctl resumed>) = 0 [pid 6428] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6429 attached NULL, 8) = 0 [pid 6426] <... munmap resumed>) = 0 [pid 6416] <... clone3 resumed> => {parent_tid=[6428]}, 88) = 6428 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6429 [pid 6429] set_robust_list(0x5555571ca6a0, 24 [pid 6428] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6426] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6416] rt_sigprocmask(SIG_SETMASK, [], [pid 6429] <... set_robust_list resumed>) = 0 [pid 6429] chdir("./74") = 0 [pid 6429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6429] setpgid(0, 0) = 0 [pid 6429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6429] write(3, "1000", 4) = 4 [pid 6429] close(3) = 0 [pid 6429] symlink("/dev/binderfs", "./binderfs" [pid 6425] close(3 [pid 6429] <... symlink resumed>) = 0 [pid 6425] <... close resumed>) = 0 [pid 6425] close(4) = 0 [pid 6425] mkdir("./file1", 0777) = 0 [ 179.273622][ T6425] loop5: detected capacity change from 0 to 1024 [ 179.274460][ T6422] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.299719][ T6420] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.307326][ T6421] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.315605][ T6421] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6429] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] <... openat resumed>) = 4 [pid 6425] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6421] <... write resumed>) = 53248 [pid 6417] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6429] <... futex resumed>) = 0 [pid 6429] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6426] ioctl(4, LOOP_SET_FD, 3 [pid 6417] <... futex resumed>) = 0 [pid 6416] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6429] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6428] <... futex resumed>) = 0 [pid 6417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6416] <... futex resumed>) = 1 [pid 6429] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 179.324638][ T6422] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.332733][ T6420] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.341925][ T6426] loop4: detected capacity change from 0 to 1024 [ 179.344553][ T28] audit: type=1800 audit(1708423256.965:446): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6428] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6426] <... ioctl resumed>) = 0 [pid 6421] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... mmap resumed>) = 0x7eff81e8c000 [pid 6416] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6419] exit_group(0 [pid 6429] <... mmap resumed>) = 0x7eff81ead000 [pid 6419] <... exit_group resumed>) = ? [pid 6429] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6417] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6429] <... mprotect resumed>) = 0 [pid 6429] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6427] <... futex resumed>) = ? [pid 6427] +++ exited with 0 +++ [pid 6429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6417] <... mprotect resumed>) = 0 [pid 6428] <... open resumed>) = 5 [pid 6426] close(3 [pid 6421] <... futex resumed>) = ? [pid 6417] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6428] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6428] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6429] <... clone3 resumed> => {parent_tid=[6430]}, 88) = 6430 [pid 6429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6416] <... futex resumed>) = 0 [pid 6429] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6429] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6425] <... mount resumed>) = 0 [pid 6425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6425] chdir("./file1") = 0 [pid 6425] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6425] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6426] <... close resumed>) = 0 ./strace-static-x86_64: Process 6430 attached [pid 6426] close(4 [pid 6425] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6421] +++ exited with 0 +++ [pid 6420] <... write resumed>) = 53248 [pid 6419] +++ exited with 0 +++ [pid 6417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [ 179.351012][ T6422] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.394480][ T6420] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.402024][ T6420] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6430] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6426] <... close resumed>) = 0 [pid 6424] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6419, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6430] set_robust_list(0x7eff81ecd9a0, 24 [pid 6426] mkdir("./file1", 0777 [pid 6420] <... futex resumed>) = 0 [pid 6417] <... clone3 resumed> => {parent_tid=[6431]}, 88) = 6431 [pid 6430] <... set_robust_list resumed>) = 0 [pid 6424] <... futex resumed>) = 0 [pid 6430] rt_sigprocmask(SIG_SETMASK, [], [pid 6416] exit_group(0 [pid 6430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], [pid 6416] <... exit_group resumed>) = ? [pid 6430] memfd_create("syzkaller", 0 [pid 6428] <... futex resumed>) = ? [pid 6425] creat("./file0", 000 [pid 6424] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] <... memfd_create resumed>) = 3 [pid 6428] +++ exited with 0 +++ [pid 6426] <... mkdir resumed>) = 0 [pid 6425] <... creat resumed>) = 4 [pid 6417] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6426] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6425] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6431 attached ) = 1 [pid 6430] <... mmap resumed>) = 0x7eff79a00000 [pid 6424] <... futex resumed>) = 0 [pid 6420] +++ exited with 0 +++ [pid 6417] <... futex resumed>) = 0 [pid 6416] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6431] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6425] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6424] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6431] <... rseq resumed>) = 0 [pid 6424] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6416, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6431] set_robust_list(0x7eff81eac9a0, 24 [pid 6424] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] newfstatat(3, "", [pid 6431] <... set_robust_list resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6431] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] getdents64(3, [pid 6431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6426] <... mount resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... restart_syscall resumed>) = 0 [pid 6431] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6430] <... write resumed>) = 524288 [pid 6426] <... openat resumed>) = 3 [pid 5074] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6430] munmap(0x7eff79a00000, 138412032 [pid 6426] chdir("./file1" [pid 6417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... chdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6430] <... munmap resumed>) = 0 [pid 6424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] unlink("./74/binderfs" [pid 5072] <... openat resumed>) = 3 [ 179.455299][ T6425] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.467165][ T28] audit: type=1800 audit(1708423257.085:447): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 179.483659][ T6422] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] newfstatat(3, "", [pid 6430] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6426] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6424] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6424] <... futex resumed>) = 0 [pid 5074] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6424] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6432]}, 88) = 6432 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] getdents64(3, [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6424] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6424] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6432 attached [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6432] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6432] <... rseq resumed>) = 0 [pid 6432] set_robust_list(0x7eff81eac9a0, 24 [pid 6426] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./73/binderfs", [pid 6432] <... set_robust_list resumed>) = 0 [pid 6426] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6430] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 179.498440][ T6425] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.504141][ T6422] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.520579][ T6425] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6432] rt_sigprocmask(SIG_SETMASK, [], [pid 6430] ioctl(4, LOOP_SET_FD, 3 [pid 6426] <... futex resumed>) = 1 [pid 6423] <... futex resumed>) = 0 [pid 5072] unlink("./73/binderfs" [pid 6423] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... unlink resumed>) = 0 [pid 6432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6426] creat("./file0", 000 [pid 5074] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6432] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5072] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./74/file1", [pid 6426] <... creat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6426] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6426] <... futex resumed>) = 0 [pid 6423] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... openat resumed>) = 4 [pid 6426] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5074] newfstatat(4, "", [pid 6426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6423] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = 0 [pid 6430] <... ioctl resumed>) = 0 [pid 6426] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6423] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 179.550885][ T6430] loop2: detected capacity change from 0 to 1024 [ 179.571892][ T6425] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6430] close(3 [pid 5074] getdents64(4, [pid 5072] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6430] <... close resumed>) = 0 [pid 6423] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6430] close(4) = 0 [pid 6430] mkdir("./file1", 0777) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./73/file1", [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] close(4 [pid 5072] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6430] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5074] rmdir("./74/file1" [ 179.583839][ T28] audit: type=1800 audit(1708423257.175:448): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 179.596547][ T6422] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.629067][ T6426] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.642437][ T6425] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6432] <... open resumed>) = 5 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6432] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] getdents64(3, [pid 5072] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5072] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./74" [pid 5072] getdents64(4, [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./73/file1" [pid 6432] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6431] <... open resumed>) = 5 [pid 6423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] mkdir("./75", 0777 [pid 5072] close(3 [pid 6431] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6431] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] rmdir("./73" [pid 6431] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6423] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... rmdir resumed>) = 0 [pid 6423] <... futex resumed>) = 0 [pid 6430] <... mount resumed>) = 0 [pid 6425] <... write resumed>) = 53248 [pid 6423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] mkdir("./74", 0777 [pid 6425] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... mmap resumed>) = 0x7eff81e8c000 [pid 6422] <... write resumed>) = 53248 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6423] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6422] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] exit_group(0) = ? [pid 6431] <... futex resumed>) = ? [pid 6425] <... futex resumed>) = 0 [pid 6424] exit_group(0 [pid 5074] close(3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6423] <... mprotect resumed>) = 0 [pid 6422] <... futex resumed>) = ? [ 179.649761][ T6425] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.662909][ T6426] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.672721][ T6426] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.680042][ T6426] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6432] <... futex resumed>) = ? [pid 6431] +++ exited with 0 +++ [pid 6424] <... exit_group resumed>) = ? [pid 6423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6422] +++ exited with 0 +++ [pid 6417] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6432] +++ exited with 0 +++ [pid 6430] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6425] +++ exited with 0 +++ [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6430] <... openat resumed>) = 3 [pid 6424] +++ exited with 0 +++ [pid 5072] <... ioctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6417, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6430] chdir("./file1" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6424, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5072] close(3 [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6430] <... chdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 6430] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6426] <... write resumed>) = 53248 [pid 6426] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6430] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... futex resumed>) = 0 [pid 6426] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6433 attached [pid 6430] <... futex resumed>) = 1 [pid 6429] <... futex resumed>) = 0 [pid 6423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6433 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6433] set_robust_list(0x5555571ca6a0, 24 [pid 6430] creat("./file0", 000 [pid 6429] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6435 attached [pid 6433] <... set_robust_list resumed>) = 0 [pid 6430] <... creat resumed>) = 4 [pid 6429] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 3 [pid 6435] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6433] chdir("./74" [pid 6430] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6429] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... clone3 resumed> => {parent_tid=[6435]}, 88) = 6435 [pid 5076] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6435] <... rseq resumed>) = 0 [pid 6433] <... chdir resumed>) = 0 [pid 6430] <... futex resumed>) = 0 [pid 6429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6423] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", ./strace-static-x86_64: Process 6434 attached [pid 6435] set_robust_list(0x7eff81eac9a0, 24 [pid 6433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6430] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6429] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] newfstatat(3, "", [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6434 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6435] <... set_robust_list resumed>) = 0 [pid 6433] <... prctl resumed>) = 0 [pid 6430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6429] <... futex resumed>) = 0 [pid 6423] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6433] setpgid(0, 0 [ 179.727891][ T6426] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.735337][ T6426] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6430] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6429] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6423] <... futex resumed>) = 0 [pid 5076] getdents64(3, [pid 5071] getdents64(3, [pid 6434] set_robust_list(0x5555571ca6a0, 24 [pid 6435] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] <... setpgid resumed>) = 0 [pid 6423] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6434] <... set_robust_list resumed>) = 0 [pid 6433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6434] chdir("./75" [pid 6435] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6433] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./74/binderfs") = 0 [pid 5071] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] write(3, "1000", 4 [pid 5076] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... open resumed>) = 5 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6434] <... chdir resumed>) = 0 [pid 6433] <... write resumed>) = 4 [pid 6434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6433] close(3 [pid 6434] <... prctl resumed>) = 0 [pid 6433] <... close resumed>) = 0 [pid 6434] setpgid(0, 0 [pid 6433] symlink("/dev/binderfs", "./binderfs" [pid 6434] <... setpgid resumed>) = 0 [pid 6433] <... symlink resumed>) = 0 [pid 6434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6434] write(3, "1000", 4) = 4 [pid 6433] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] close(3 [pid 6433] <... futex resumed>) = 0 [pid 6434] <... close resumed>) = 0 [pid 6433] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6434] symlink("/dev/binderfs", "./binderfs" [pid 6433] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6434] <... symlink resumed>) = 0 [pid 6433] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6434] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6434] <... futex resumed>) = 0 [pid 6433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6435] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] newfstatat(AT_FDCWD, "./75/binderfs", [pid 6434] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6433] <... mmap resumed>) = 0x7eff81ead000 [pid 6429] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6434] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6435] <... futex resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6435] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6433] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6429] <... futex resumed>) = 0 [pid 6423] exit_group(0 [pid 6434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] <... mprotect resumed>) = 0 [pid 6434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6423] <... exit_group resumed>) = ? [pid 6434] <... mmap resumed>) = 0x7eff81ead000 [ 179.803761][ T6430] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.811097][ T6430] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.823116][ T28] audit: type=1800 audit(1708423257.445:449): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 6433] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6429] <... mmap resumed>) = 0x7eff81e8c000 [pid 6434] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6435] <... futex resumed>) = ? [pid 6433] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6429] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6426] <... futex resumed>) = ? [pid 5071] unlink("./75/binderfs" [pid 6434] <... mprotect resumed>) = 0 [pid 6433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6429] <... mprotect resumed>) = 0 [pid 6434] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6429] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6426] +++ exited with 0 +++ [pid 5071] <... unlink resumed>) = 0 [pid 6434] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6433] <... clone3 resumed> => {parent_tid=[6436]}, 88) = 6436 [pid 6429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6433] rt_sigprocmask(SIG_SETMASK, [], [pid 6429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6438 attached [pid 6433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6434] <... clone3 resumed> => {parent_tid=[6437]}, 88) = 6437 [pid 6433] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6429] <... clone3 resumed> => {parent_tid=[6438]}, 88) = 6438 ./strace-static-x86_64: Process 6436 attached [pid 6438] <... rseq resumed>) = 0 [pid 6434] rt_sigprocmask(SIG_SETMASK, [], [pid 6435] +++ exited with 0 +++ [pid 6433] <... futex resumed>) = 0 [pid 6429] rt_sigprocmask(SIG_SETMASK, [], [pid 6423] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 6438] set_robust_list(0x7eff81eac9a0, 24 [pid 6436] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6423, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 6437 attached [pid 6438] <... set_robust_list resumed>) = 0 [pid 5076] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 6438] rt_sigprocmask(SIG_SETMASK, [], [pid 6437] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6434] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6429] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6437] <... rseq resumed>) = 0 [pid 6434] <... futex resumed>) = 0 [pid 6429] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./74/file1", [pid 5071] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6437] set_robust_list(0x7eff81ecd9a0, 24 [pid 6436] <... rseq resumed>) = 0 [pid 6434] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6429] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] set_robust_list(0x7eff81ecd9a0, 24 [pid 5076] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6436] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6436] memfd_create("syzkaller", 0 [pid 5076] newfstatat(4, "", [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] <... memfd_create resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(AT_FDCWD, "./75/file1", [pid 6437] <... set_robust_list resumed>) = 0 [ 179.872022][ T6430] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.880520][ T6430] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.894427][ T6430] hfsplus: request for non-existent node 16777216 in B*Tree [ 179.901749][ T6430] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6430] <... write resumed>) = 53248 [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 6436] <... mmap resumed>) = 0x7eff79a00000 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] newfstatat(3, "", [pid 6436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(3, [pid 6438] <... open resumed>) = 5 [pid 6437] rt_sigprocmask(SIG_SETMASK, [], [pid 6430] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6438] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6436] <... write resumed>) = 524288 [pid 6429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6429] exit_group(0 [pid 5076] rmdir("./74/file1" [pid 5075] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6429] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] close(3 [pid 5075] unlink("./73/binderfs" [pid 5076] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5076] rmdir("./74" [pid 5075] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./75", 0777) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 4 [ 179.911841][ T28] audit: type=1800 audit(1708423257.515:450): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(4, "", [pid 6430] +++ exited with 0 +++ [pid 5076] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] close(3) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] getdents64(4, [pid 6437] memfd_create("syzkaller", 0) = 3 [pid 6436] munmap(0x7eff79a00000, 138412032 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6436] <... munmap resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 6437] <... mmap resumed>) = 0x7eff79a00000 [pid 6436] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] newfstatat(AT_FDCWD, "./73/file1", [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6439 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(4 [pid 6436] <... openat resumed>) = 4 [pid 5075] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 ./strace-static-x86_64: Process 6439 attached [pid 6437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6436] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./75/file1" [pid 6439] set_robust_list(0x5555571ca6a0, 24 [pid 6438] <... futex resumed>) = ? [pid 5075] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 6439] <... set_robust_list resumed>) = 0 [pid 5071] getdents64(3, [pid 6439] chdir("./75" [pid 6438] +++ exited with 0 +++ [pid 6429] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6439] <... chdir resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6429, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3 [pid 6439] <... prctl resumed>) = 0 [pid 5075] getdents64(4, [pid 6439] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 6439] <... setpgid resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] rmdir("./75" [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] getdents64(4, [pid 6439] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6439] write(3, "1000", 4 [pid 5075] close(4 [pid 5073] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] <... write resumed>) = 4 [pid 6437] <... write resumed>) = 524288 [pid 6436] <... ioctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... rmdir resumed>) = 0 [pid 6439] close(3 [pid 6437] munmap(0x7eff79a00000, 138412032 [pid 6436] close(3 [pid 5075] rmdir("./73/file1" [pid 5073] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6439] <... close resumed>) = 0 [pid 6439] symlink("/dev/binderfs", "./binderfs" [pid 6437] <... munmap resumed>) = 0 [pid 6436] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5071] mkdir("./76", 0777 [pid 6439] <... symlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5071] <... mkdir resumed>) = 0 [pid 6439] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6436] close(4 [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6436] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(3, [pid 5071] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] close(3 [pid 6436] mkdir("./file1", 0777 [pid 5075] <... close resumed>) = 0 [pid 5073] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6439] <... futex resumed>) = 0 [pid 6437] <... openat resumed>) = 4 [pid 5075] rmdir("./73") = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6439] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [ 180.019929][ T6436] loop1: detected capacity change from 0 to 1024 [pid 6437] ioctl(4, LOOP_SET_FD, 3 [pid 6436] <... mkdir resumed>) = 0 [pid 5075] mkdir("./74", 0777 [pid 6439] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5073] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6436] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6437] <... ioctl resumed>) = 0 [pid 5073] unlink("./74/binderfs" [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6439] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 6439] <... mprotect resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6437] close(3 [pid 6436] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6440 attached [pid 6437] <... close resumed>) = 0 [pid 6436] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6440] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6439] <... clone3 resumed> => {parent_tid=[6440]}, 88) = 6440 [pid 6437] close(4 [pid 6440] <... rseq resumed>) = 0 [pid 6439] rt_sigprocmask(SIG_SETMASK, [], [pid 6437] <... close resumed>) = 0 [pid 6436] <... openat resumed>) = 3 [pid 6440] set_robust_list(0x7eff81ecd9a0, 24 [pid 6439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6437] mkdir("./file1", 0777 [pid 6436] chdir("./file1" [pid 6440] <... set_robust_list resumed>) = 0 [pid 6440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6437] <... mkdir resumed>) = 0 [pid 6440] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] <... ioctl resumed>) = 0 [pid 6439] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6436] <... chdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] close(3 [pid 6440] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = 1 [pid 6436] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 6439] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6436] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6440] memfd_create("syzkaller", 0 [pid 6436] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6436] <... futex resumed>) = 1 [pid 6433] <... futex resumed>) = 0 [pid 6440] <... memfd_create resumed>) = 3 [ 180.078210][ T6437] loop3: detected capacity change from 0 to 1024 [pid 6436] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6433] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6433] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] creat("./file0", 000 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6436] <... creat resumed>) = 4 [pid 6440] <... mmap resumed>) = 0x7eff79a00000 [pid 6436] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6441 ./strace-static-x86_64: Process 6441 attached [pid 6441] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6441] chdir("./76") = 0 [pid 6441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6436] <... futex resumed>) = 1 [pid 6433] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6433] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6436] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5073] newfstatat(AT_FDCWD, "./74/file1", [pid 6433] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... prctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6441] setpgid(0, 0 [pid 5073] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6441] <... setpgid resumed>) = 0 [pid 6437] <... mount resumed>) = 0 [pid 5075] close(3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6441] write(3, "1000", 4) = 4 [pid 6441] close(3) = 0 [pid 6441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6437] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6437] chdir("./file1" [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6437] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6442 attached [pid 6441] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(4, [pid 6441] <... futex resumed>) = 0 [pid 6441] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6437] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6442 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6440] <... write resumed>) = 524288 [pid 6433] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6433] <... futex resumed>) = 0 [pid 6441] <... mmap resumed>) = 0x7eff81ead000 [pid 6433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6441] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6433] <... mmap resumed>) = 0x7eff81e8c000 [pid 6441] <... mprotect resumed>) = 0 [pid 6433] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6442] set_robust_list(0x5555571ca6a0, 24 [pid 6441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6440] munmap(0x7eff79a00000, 138412032 [pid 6437] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... mprotect resumed>) = 0 [pid 5073] getdents64(4, [pid 6442] <... set_robust_list resumed>) = 0 [pid 6437] <... futex resumed>) = 1 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6437] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] close(4 [pid 6442] chdir("./74" [pid 6440] <... munmap resumed>) = 0 [pid 6434] <... futex resumed>) = 0 [pid 6433] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] <... close resumed>) = 0 [pid 6442] <... chdir resumed>) = 0 [pid 6434] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] rmdir("./74/file1" [pid 6442] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6437] <... futex resumed>) = 0 [pid 6434] <... futex resumed>) = 1 [ 180.172728][ T6436] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.180905][ T6436] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.203021][ T6436] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.211419][ T6436] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6433] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6440] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6434] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... prctl resumed>) = 0 [pid 6441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6440] <... openat resumed>) = 4 [pid 6437] creat("./file0", 000 [pid 5073] <... rmdir resumed>) = 0 [pid 6442] setpgid(0, 0 [pid 6440] ioctl(4, LOOP_SET_FD, 3 [pid 6433] <... clone3 resumed> => {parent_tid=[6443]}, 88) = 6443 ./strace-static-x86_64: Process 6444 attached ./strace-static-x86_64: Process 6443 attached [pid 6442] <... setpgid resumed>) = 0 [pid 6441] <... clone3 resumed> => {parent_tid=[6444]}, 88) = 6444 [pid 6437] <... creat resumed>) = 4 [pid 6433] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] getdents64(3, [pid 6443] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6441] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6443] <... rseq resumed>) = 0 [pid 6441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] set_robust_list(0x7eff81eac9a0, 24 [pid 6441] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... futex resumed>) = 0 [pid 6443] <... set_robust_list resumed>) = 0 [pid 6442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6441] <... futex resumed>) = 0 [pid 6433] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] rt_sigprocmask(SIG_SETMASK, [], [pid 6441] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6443] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6442] <... openat resumed>) = 3 [pid 5073] close(3 [pid 6444] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6442] write(3, "1000", 4 [pid 6444] <... rseq resumed>) = 0 [pid 6442] <... write resumed>) = 4 [pid 6437] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 6442] close(3 [pid 6437] <... futex resumed>) = 1 [pid 6434] <... futex resumed>) = 0 [pid 5073] rmdir("./74" [pid 6440] <... ioctl resumed>) = 0 [pid 6434] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... rmdir resumed>) = 0 [pid 6442] <... close resumed>) = 0 [pid 6440] close(3 [pid 6437] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6444] set_robust_list(0x7eff81ecd9a0, 24 [pid 6434] <... futex resumed>) = 0 [pid 5073] mkdir("./75", 0777 [pid 6440] <... close resumed>) = 0 [pid 6440] close(4) = 0 [pid 6440] mkdir("./file1", 0777) = 0 [ 180.228437][ T6440] loop5: detected capacity change from 0 to 1024 [ 180.230129][ T6436] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.255255][ T28] audit: type=1800 audit(1708423257.865:451): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 6440] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6444] <... set_robust_list resumed>) = 0 [pid 6434] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... mkdir resumed>) = 0 [pid 6444] rt_sigprocmask(SIG_SETMASK, [], [pid 6442] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6444] memfd_create("syzkaller", 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6442] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6444] <... memfd_create resumed>) = 3 [pid 6444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6442] <... futex resumed>) = 0 [pid 6444] <... mmap resumed>) = 0x7eff79a00000 [pid 6442] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6433] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6442] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6445 attached [ 180.260966][ T6436] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6445] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6443] <... open resumed>) = 5 [pid 6445] <... rseq resumed>) = 0 [pid 6444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6442] <... clone3 resumed> => {parent_tid=[6445]}, 88) = 6445 [pid 6440] <... mount resumed>) = 0 [pid 6436] <... write resumed>) = 53248 [pid 6443] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6436] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6445] set_robust_list(0x7eff81ecd9a0, 24 [pid 6442] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] exit_group(0 [pid 6445] <... set_robust_list resumed>) = 0 [pid 6443] <... futex resumed>) = ? [pid 6442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6440] <... openat resumed>) = 3 [pid 6436] <... futex resumed>) = ? [pid 6433] <... exit_group resumed>) = ? [pid 6443] +++ exited with 0 +++ [pid 6445] rt_sigprocmask(SIG_SETMASK, [], [pid 6442] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] chdir("./file1" [pid 6445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6442] <... futex resumed>) = 0 [pid 6440] <... chdir resumed>) = 0 [pid 6434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6445] memfd_create("syzkaller", 0 [pid 6442] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6440] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6434] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... memfd_create resumed>) = 3 [pid 6434] <... futex resumed>) = 0 [pid 6445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6440] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6436] +++ exited with 0 +++ [pid 6434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6433] +++ exited with 0 +++ [pid 6434] <... mmap resumed>) = 0x7eff81e8c000 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6433, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6434] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6434] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6434] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6445] <... mmap resumed>) = 0x7eff79a00000 [pid 6440] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6446 attached ) = 3 [pid 6446] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6434] <... clone3 resumed> => {parent_tid=[6446]}, 88) = 6446 [pid 5072] newfstatat(3, "", [pid 6446] <... rseq resumed>) = 0 [pid 6440] <... futex resumed>) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6434] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6446] set_robust_list(0x7eff81eac9a0, 24 [pid 6445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6444] <... write resumed>) = 524288 [pid 6440] creat("./file0", 000 [pid 6439] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] getdents64(3, [pid 6446] <... set_robust_list resumed>) = 0 [pid 6439] <... futex resumed>) = 0 [pid 6434] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6446] rt_sigprocmask(SIG_SETMASK, [], [pid 6439] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = 0 [pid 5072] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6444] munmap(0x7eff79a00000, 138412032 [pid 6440] <... creat resumed>) = 4 [pid 6434] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 180.304586][ T6437] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.316817][ T6437] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.339206][ T6437] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6440] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6440] <... futex resumed>) = 1 [pid 6439] <... futex resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6445] <... write resumed>) = 524288 [pid 6444] <... munmap resumed>) = 0 [pid 6440] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6439] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 180.369394][ T6437] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.372221][ T28] audit: type=1800 audit(1708423257.985:452): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 180.383562][ T6437] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] close(3 [pid 6439] <... futex resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./74/binderfs") = 0 [pid 5072] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6445] munmap(0x7eff79a00000, 138412032 [pid 6444] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6445] <... munmap resumed>) = 0 [pid 6444] <... openat resumed>) = 4 [pid 6439] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6447 [pid 6444] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6447 attached [pid 6445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6444] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [ 180.419758][ T6440] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.432638][ T6444] loop0: detected capacity change from 0 to 1024 [ 180.444910][ T6440] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.452715][ T6440] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.460119][ T6440] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6447] set_robust_list(0x5555571ca6a0, 24 [pid 6445] <... openat resumed>) = 4 [pid 6444] close(3 [pid 5072] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6439] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6447] <... set_robust_list resumed>) = 0 [pid 6445] ioctl(4, LOOP_SET_FD, 3 [pid 6444] <... close resumed>) = 0 [pid 6439] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6439] <... futex resumed>) = 0 [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6439] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5072] newfstatat(AT_FDCWD, "./74/file1", [pid 6444] close(4) = 0 [pid 6439] <... mprotect resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6444] mkdir("./file1", 0777 [pid 6439] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] chdir("./75" [pid 6439] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6447] <... chdir resumed>) = 0 [pid 6445] <... ioctl resumed>) = 0 [pid 6444] <... mkdir resumed>) = 0 [pid 6440] <... write resumed>) = 53248 [pid 6439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6445] close(3 [pid 6444] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6440] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6447] <... prctl resumed>) = 0 [pid 6445] <... close resumed>) = 0 [pid 6447] setpgid(0, 0 [pid 6445] close(4 [pid 6440] <... futex resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6447] <... setpgid resumed>) = 0 [pid 6445] <... close resumed>) = 0 [pid 6440] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6445] mkdir("./file1", 0777 [pid 5072] newfstatat(4, "", [pid 6439] <... clone3 resumed> => {parent_tid=[6448]}, 88) = 6448 [pid 6439] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6448 attached [pid 6447] <... openat resumed>) = 3 [pid 6445] <... mkdir resumed>) = 0 [pid 6439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6448] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6447] write(3, "1000", 4 [pid 5072] getdents64(4, [pid 6447] <... write resumed>) = 4 [pid 6439] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6447] close(3) = 0 [pid 6439] <... futex resumed>) = 0 [pid 6439] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 180.472879][ T6440] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.475384][ T6437] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.482094][ T6440] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.496208][ T6445] loop4: detected capacity change from 0 to 1024 [pid 6447] symlink("/dev/binderfs", "./binderfs" [pid 6448] <... rseq resumed>) = 0 [pid 6447] <... symlink resumed>) = 0 [pid 6446] <... open resumed>) = 5 [pid 6437] <... write resumed>) = 53248 [pid 5072] getdents64(4, [pid 6448] set_robust_list(0x7eff81eac9a0, 24 [pid 6447] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6444] <... mount resumed>) = 0 [pid 6437] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6447] <... futex resumed>) = 0 [pid 6444] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6437] <... futex resumed>) = 0 [pid 6448] <... set_robust_list resumed>) = 0 [pid 5072] close(4 [pid 6448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5072] <... close resumed>) = 0 [pid 6437] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6446] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6434] exit_group(0 [pid 6448] <... open resumed>) = 5 [pid 6447] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6446] <... futex resumed>) = ? [pid 6445] <... mount resumed>) = 0 [pid 6444] <... openat resumed>) = 3 [pid 6437] <... futex resumed>) = ? [pid 6434] <... exit_group resumed>) = ? [pid 5072] rmdir("./74/file1" [pid 6437] +++ exited with 0 +++ [pid 6446] +++ exited with 0 +++ [pid 6445] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6439] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6434] +++ exited with 0 +++ [pid 5072] <... rmdir resumed>) = 0 [pid 6448] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6445] <... openat resumed>) = 3 [pid 6444] chdir("./file1" [pid 6439] exit_group(0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6434, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5072] getdents64(3, [pid 6448] <... futex resumed>) = 0 [pid 6447] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6445] chdir("./file1" [pid 6444] <... chdir resumed>) = 0 [pid 6448] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] <... chdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6444] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6445] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] close(3 [pid 6448] <... futex resumed>) = ? [pid 6440] <... futex resumed>) = ? [pid 6439] <... exit_group resumed>) = ? [pid 5072] <... close resumed>) = 0 [pid 6440] +++ exited with 0 +++ [pid 5072] rmdir("./74" [pid 5074] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5072] mkdir("./75", 0777 [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6444] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] getdents64(3, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6447] <... mmap resumed>) = 0x7eff81ead000 [pid 6444] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6447] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6444] <... futex resumed>) = 1 [pid 6441] <... futex resumed>) = 0 [pid 5074] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 6444] creat("./file0", 000 [pid 6441] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] +++ exited with 0 +++ [pid 6445] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... creat resumed>) = 4 [pid 6441] <... futex resumed>) = 0 [pid 6439] +++ exited with 0 +++ [ 180.563297][ T28] audit: type=1800 audit(1708423258.185:453): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6447] <... mprotect resumed>) = 0 [pid 6445] <... futex resumed>) = 1 [pid 6442] <... futex resumed>) = 0 [pid 6441] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6445] creat("./file0", 000 [pid 6442] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5074] newfstatat(AT_FDCWD, "./75/binderfs", [pid 6447] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6445] <... creat resumed>) = 4 [pid 6444] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6447] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6442] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] unlink("./75/binderfs"./strace-static-x86_64: Process 6449 attached [pid 6445] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = 1 [pid 6441] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6449] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6447] <... clone3 resumed> => {parent_tid=[6449]}, 88) = 6449 [pid 6445] <... futex resumed>) = 1 [pid 6444] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6442] <... futex resumed>) = 0 [pid 6441] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... rseq resumed>) = 0 [pid 6447] rt_sigprocmask(SIG_SETMASK, [], [pid 6445] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6442] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = 0 [pid 5076] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] set_robust_list(0x7eff81ecd9a0, 24 [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... futex resumed>) = 0 [pid 6441] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... set_robust_list resumed>) = 0 [pid 6447] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6442] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6447] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6447] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 6449] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] <... umount2 resumed>) = 0 [pid 5076] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./75/binderfs" [pid 6449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] memfd_create("syzkaller", 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6441] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(AT_FDCWD, "./75/file1", [pid 6442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6441] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6449] <... memfd_create resumed>) = 3 [pid 6442] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6442] <... futex resumed>) = 0 [pid 5072] close(3 [pid 6449] <... mmap resumed>) = 0x7eff79a00000 [pid 6442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6441] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [ 180.664529][ T6445] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.681208][ T6444] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.702139][ T6445] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6442] <... mmap resumed>) = 0x7eff81e8c000 [pid 6441] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6442] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6441] <... mprotect resumed>) = 0 [pid 5074] <... openat resumed>) = 4 [pid 6442] <... mprotect resumed>) = 0 [pid 6441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] newfstatat(4, "", [pid 6442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] getdents64(4, [pid 6441] <... clone3 resumed> => {parent_tid=[6450]}, 88) = 6450 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6450 attached [pid 6442] <... clone3 resumed> => {parent_tid=[6451]}, 88) = 6451 [pid 6441] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] getdents64(4, ./strace-static-x86_64: Process 6451 attached [pid 6450] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6451] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6450] <... rseq resumed>) = 0 [pid 6442] rt_sigprocmask(SIG_SETMASK, [], [pid 6441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6451] <... rseq resumed>) = 0 [pid 6450] set_robust_list(0x7eff81eac9a0, 24 [pid 6442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6441] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(4 [pid 6451] set_robust_list(0x7eff81eac9a0, 24 [pid 6450] <... set_robust_list resumed>) = 0 [pid 6442] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6451] <... set_robust_list resumed>) = 0 [pid 6450] rt_sigprocmask(SIG_SETMASK, [], [pid 6442] <... futex resumed>) = 0 [pid 6441] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] rmdir("./75/file1" [pid 6451] rt_sigprocmask(SIG_SETMASK, [], [pid 6450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6442] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 6451] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6450] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] getdents64(3, [pid 6451] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [ 180.724780][ T6445] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.732236][ T6444] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.744114][ T6444] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] close(3) = 0 [pid 5074] rmdir("./75" [pid 5076] <... umount2 resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6452 ./strace-static-x86_64: Process 6452 attached [pid 5074] mkdir("./76", 0777) = 0 [pid 6452] set_robust_list(0x5555571ca6a0, 24 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 3 [pid 6452] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6452] chdir("./75" [pid 6441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] newfstatat(AT_FDCWD, "./75/file1", [pid 6452] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6452] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6452] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6449] <... write resumed>) = 524288 [pid 6452] setpgid(0, 0 [pid 6442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6452] <... setpgid resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6450] <... open resumed>) = 5 [pid 5076] newfstatat(4, "", [pid 6450] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6450] <... futex resumed>) = 0 [pid 5076] getdents64(4, [pid 6452] <... openat resumed>) = 3 [pid 6450] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] munmap(0x7eff79a00000, 138412032 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6449] <... munmap resumed>) = 0 [pid 5076] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6452] write(3, "1000", 4 [pid 5076] <... close resumed>) = 0 [pid 6452] <... write resumed>) = 4 [pid 5076] rmdir("./75/file1" [pid 6452] close(3 [pid 5076] <... rmdir resumed>) = 0 [ 180.756858][ T28] audit: type=1800 audit(1708423258.355:454): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 180.782456][ T6445] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.792436][ T6444] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6452] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 6452] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6452] <... symlink resumed>) = 0 [pid 5076] close(3 [pid 6452] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 6452] <... futex resumed>) = 0 [pid 5076] rmdir("./75" [pid 6452] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... rmdir resumed>) = 0 [pid 5076] mkdir("./76", 0777 [pid 6452] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6452] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... ioctl resumed>) = 0 [pid 6452] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] close(3 [pid 6452] <... mprotect resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6452] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6452] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6453 ./strace-static-x86_64: Process 6454 attached [pid 6449] <... openat resumed>) = 4 [pid 5074] <... ioctl resumed>) = 0 [pid 6454] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6449] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6453 attached [pid 6454] <... rseq resumed>) = 0 [pid 6452] <... clone3 resumed> => {parent_tid=[6454]}, 88) = 6454 [pid 6454] set_robust_list(0x7eff81ecd9a0, 24 [pid 6453] set_robust_list(0x5555571ca6a0, 24 [pid 6452] rt_sigprocmask(SIG_SETMASK, [], [pid 6454] <... set_robust_list resumed>) = 0 [pid 6453] <... set_robust_list resumed>) = 0 [pid 6452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6453] chdir("./76" [pid 6452] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6453] <... chdir resumed>) = 0 [pid 6452] <... futex resumed>) = 0 [pid 6453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6452] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6454] rt_sigprocmask(SIG_SETMASK, [], [pid 6453] <... prctl resumed>) = 0 [pid 6454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6454] memfd_create("syzkaller", 0 [pid 6453] setpgid(0, 0 [pid 6454] <... memfd_create resumed>) = 3 [pid 6453] <... setpgid resumed>) = 0 [pid 6449] <... ioctl resumed>) = 0 [pid 6453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6453] <... openat resumed>) = 3 [pid 6454] <... mmap resumed>) = 0x7eff79a00000 [ 180.823044][ T6445] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.842832][ T6444] hfsplus: request for non-existent node 16777216 in B*Tree [ 180.852346][ T6449] loop2: detected capacity change from 0 to 1024 [ 180.865555][ T6445] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6453] write(3, "1000", 4 [pid 5074] close(3 [pid 6453] <... write resumed>) = 4 [pid 6453] close(3 [pid 5074] <... close resumed>) = 0 [pid 6453] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6453] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6453] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6455 [pid 6453] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6455 attached [pid 6454] <... write resumed>) = 524288 [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] close(3 [pid 6455] set_robust_list(0x5555571ca6a0, 24 [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6455] <... set_robust_list resumed>) = 0 [pid 6453] <... mmap resumed>) = 0x7eff81ead000 [pid 6455] chdir("./76" [pid 6453] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6451] <... open resumed>) = 5 [pid 6449] <... close resumed>) = 0 [pid 6453] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6451] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... write resumed>) = 53248 [pid 6449] close(4 [pid 6453] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6451] <... futex resumed>) = 0 [pid 6449] <... close resumed>) = 0 [pid 6445] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] <... chdir resumed>) = 0 [pid 6453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6451] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] mkdir("./file1", 0777./strace-static-x86_64: Process 6456 attached [pid 6455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6445] <... futex resumed>) = 0 [pid 6442] exit_group(0 [pid 6456] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6455] <... prctl resumed>) = 0 [pid 6453] <... clone3 resumed> => {parent_tid=[6456]}, 88) = 6456 [pid 6451] <... futex resumed>) = ? [pid 6442] <... exit_group resumed>) = ? [pid 6456] <... rseq resumed>) = 0 [pid 6455] setpgid(0, 0 [pid 6453] rt_sigprocmask(SIG_SETMASK, [], [pid 6451] +++ exited with 0 +++ [pid 6449] <... mkdir resumed>) = 0 [pid 6445] +++ exited with 0 +++ [pid 6456] set_robust_list(0x7eff81ecd9a0, 24 [pid 6455] <... setpgid resumed>) = 0 [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6456] <... set_robust_list resumed>) = 0 [pid 6455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6453] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] rt_sigprocmask(SIG_SETMASK, [], [pid 6455] <... openat resumed>) = 3 [pid 6454] munmap(0x7eff79a00000, 138412032 [pid 6453] <... futex resumed>) = 0 [pid 6449] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6442] +++ exited with 0 +++ [pid 6456] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 180.889655][ T6444] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6455] write(3, "1000", 4 [pid 6454] <... munmap resumed>) = 0 [pid 6453] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6456] memfd_create("syzkaller", 0 [pid 6455] <... write resumed>) = 4 [pid 6454] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6442, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 6456] <... memfd_create resumed>) = 3 [pid 6449] <... mount resumed>) = 0 [pid 6444] <... write resumed>) = 53248 [pid 6456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6455] close(3 [pid 6449] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6444] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] <... mmap resumed>) = 0x7eff79a00000 [pid 6455] <... close resumed>) = 0 [pid 6454] <... openat resumed>) = 4 [pid 6444] <... futex resumed>) = 0 [pid 6444] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6455] symlink("/dev/binderfs", "./binderfs" [pid 6454] ioctl(4, LOOP_SET_FD, 3 [pid 6449] <... openat resumed>) = 3 [pid 5075] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] <... symlink resumed>) = 0 [pid 6441] exit_group(0 [pid 6456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6455] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] <... futex resumed>) = ? [pid 6444] <... futex resumed>) = ? [pid 6441] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] chdir("./file1" [pid 6455] <... futex resumed>) = 0 [pid 6450] +++ exited with 0 +++ [pid 6449] <... chdir resumed>) = 0 [pid 6441] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 6455] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6455] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6441, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6449] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6449] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] newfstatat(3, "", [pid 6455] <... mmap resumed>) = 0x7eff81ead000 [pid 6455] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5071] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] <... mprotect resumed>) = 0 [pid 6449] <... futex resumed>) = 1 [pid 6447] <... futex resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6455] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6447] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] getdents64(3, [pid 5071] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6455] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6449] creat("./file0", 000 [pid 6447] <... futex resumed>) = 0 [pid 6455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6454] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... openat resumed>) = 3 [pid 6447] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6457 attached [pid 6454] close(3 [pid 5075] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 6457] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6454] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] <... rseq resumed>) = 0 [pid 6454] close(4 [pid 6449] <... creat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6457] set_robust_list(0x7eff81ecd9a0, 24 [pid 6454] <... close resumed>) = 0 [pid 6449] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5071] getdents64(3, [pid 6457] <... set_robust_list resumed>) = 0 [pid 6455] <... clone3 resumed> => {parent_tid=[6457]}, 88) = 6457 [pid 6454] mkdir("./file1", 0777 [pid 6457] rt_sigprocmask(SIG_SETMASK, [], [pid 6455] rt_sigprocmask(SIG_SETMASK, [], [pid 6454] <... mkdir resumed>) = 0 [pid 6449] <... futex resumed>) = 1 [pid 6447] <... futex resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6447] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6456] <... write resumed>) = 524288 [pid 6455] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6447] <... futex resumed>) = 0 [pid 5075] unlink("./74/binderfs" [pid 5071] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 180.973956][ T6454] loop1: detected capacity change from 0 to 1024 [pid 6456] munmap(0x7eff79a00000, 138412032 [pid 6455] <... futex resumed>) = 0 [pid 6447] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6457] memfd_create("syzkaller", 0 [pid 6455] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... unlink resumed>) = 0 [pid 6456] <... munmap resumed>) = 0 [pid 6457] <... memfd_create resumed>) = 3 [pid 5075] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6456] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6456] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] unlink("./76/binderfs" [pid 6456] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] <... ioctl resumed>) = 0 [pid 6456] close(3 [pid 5075] <... umount2 resumed>) = 0 [pid 6457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6456] <... close resumed>) = 0 [pid 5075] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] close(4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6456] <... close resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./74/file1", [pid 6456] mkdir("./file1", 0777 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6456] <... mkdir resumed>) = 0 [pid 6454] <... mount resumed>) = 0 [pid 5075] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 6456] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] <... write resumed>) = 524288 [pid 6447] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6447] <... futex resumed>) = 0 [pid 6457] munmap(0x7eff79a00000, 138412032 [pid 6454] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... openat resumed>) = 4 [pid 6454] <... openat resumed>) = 3 [pid 6447] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] newfstatat(4, "", [pid 6457] <... munmap resumed>) = 0 [pid 6454] chdir("./file1" [pid 6447] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6454] <... chdir resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6457] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6447] <... mprotect resumed>) = 0 [pid 6457] <... openat resumed>) = 4 [pid 6454] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6447] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] getdents64(4, [pid 6457] ioctl(4, LOOP_SET_FD, 3 [pid 6454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6447] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [ 181.052928][ T6456] loop5: detected capacity change from 0 to 1024 [ 181.069179][ T6449] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6454] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6452] <... futex resumed>) = 0 [pid 6454] creat("./file0", 000 [pid 6452] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] <... creat resumed>) = 4 [pid 6452] <... futex resumed>) = 0 [pid 6454] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6452] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6454] <... futex resumed>) = 0 [pid 6452] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6454] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6452] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] getdents64(4, [pid 5071] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6447] <... clone3 resumed> => {parent_tid=[6458]}, 88) = 6458 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4./strace-static-x86_64: Process 6458 attached [pid 6447] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] newfstatat(AT_FDCWD, "./76/file1", [pid 6458] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... close resumed>) = 0 [pid 6458] <... rseq resumed>) = 0 [pid 6454] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6452] <... futex resumed>) = 0 [pid 6447] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./74/file1" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6458] set_robust_list(0x7eff81eac9a0, 24 [pid 6456] <... mount resumed>) = 0 [pid 6452] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] <... futex resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6458] <... set_robust_list resumed>) = 0 [pid 6456] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6447] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] getdents64(3, [pid 5071] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6458] rt_sigprocmask(SIG_SETMASK, [], [pid 6457] <... ioctl resumed>) = 0 [pid 6456] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6458] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6457] close(3 [pid 6456] chdir("./file1" [ 181.109662][ T6457] loop3: detected capacity change from 0 to 1024 [ 181.113371][ T6449] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.144229][ T6454] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.151557][ T6454] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6457] <... close resumed>) = 0 [pid 6456] <... chdir resumed>) = 0 [pid 6452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6457] close(4 [pid 6456] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] rmdir("./74" [pid 6457] <... close resumed>) = 0 [pid 6456] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6452] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6456] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... rmdir resumed>) = 0 [pid 6457] mkdir("./file1", 0777 [pid 6456] <... futex resumed>) = 1 [pid 5071] <... openat resumed>) = 4 [pid 6453] <... futex resumed>) = 0 [pid 6452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6457] <... mkdir resumed>) = 0 [pid 6456] creat("./file0", 000 [pid 6453] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6452] <... mmap resumed>) = 0x7eff81e8c000 [pid 5071] newfstatat(4, "", [pid 6453] <... futex resumed>) = 0 [pid 6453] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6452] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6456] <... creat resumed>) = 4 [pid 6452] <... mprotect resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6457] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6456] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6452] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6456] <... futex resumed>) = 1 [pid 6453] <... futex resumed>) = 0 [pid 6452] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] getdents64(4, [pid 6453] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 181.164943][ T6449] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.172547][ T6449] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6459 attached [pid 6456] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6453] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6452] <... clone3 resumed> => {parent_tid=[6459]}, 88) = 6459 [pid 6452] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] getdents64(4, [pid 6452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6459] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6452] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] mkdir("./75", 0777 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6452] <... futex resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6459] <... rseq resumed>) = 0 [pid 6452] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] close(4 [pid 6459] set_robust_list(0x7eff81eac9a0, 24 [pid 5075] <... openat resumed>) = 3 [pid 6459] <... set_robust_list resumed>) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... close resumed>) = 0 [pid 6459] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] <... ioctl resumed>) = 0 [pid 5071] rmdir("./76/file1" [pid 6459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6459] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6457] <... mount resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6460 attached [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6460 [pid 6460] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 5071] getdents64(3, [pid 6457] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6460] chdir("./75") = 0 [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6457] <... openat resumed>) = 3 [pid 6460] <... prctl resumed>) = 0 [pid 6458] <... open resumed>) = 5 [pid 6457] chdir("./file1" [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [ 181.216085][ T6454] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.241131][ T6456] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.258622][ T6454] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6460] setpgid(0, 0 [pid 6458] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] <... chdir resumed>) = 0 [pid 6453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] close(3 [pid 6460] <... setpgid resumed>) = 0 [pid 6453] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6453] <... futex resumed>) = 0 [pid 6460] <... openat resumed>) = 3 [pid 6453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6460] write(3, "1000", 4 [pid 6453] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6460] <... write resumed>) = 4 [pid 6453] <... mprotect resumed>) = 0 [pid 6460] close(3 [pid 6458] <... futex resumed>) = 0 [pid 6453] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6460] <... close resumed>) = 0 [pid 6458] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6453] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6452] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... close resumed>) = 0 [pid 6460] symlink("/dev/binderfs", "./binderfs" [pid 6457] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6460] <... symlink resumed>) = 0 [pid 6457] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] rmdir("./76" [pid 6460] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] <... futex resumed>) = 1 [pid 6455] <... futex resumed>) = 0 [pid 6453] <... clone3 resumed> => {parent_tid=[6461]}, 88) = 6461 ./strace-static-x86_64: Process 6461 attached [pid 6460] <... futex resumed>) = 0 [pid 6457] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6455] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6453] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... rmdir resumed>) = 0 [pid 6461] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6460] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6461] <... rseq resumed>) = 0 [pid 6460] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6455] <... futex resumed>) = 0 [pid 6453] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] mkdir("./77", 0777 [pid 6461] set_robust_list(0x7eff81eac9a0, 24 [pid 6459] <... open resumed>) = 5 [pid 6457] creat("./file0", 000 [ 181.268595][ T6449] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.272326][ T6456] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.303723][ T6449] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.311331][ T6454] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6455] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6461] <... set_robust_list resumed>) = 0 [pid 6460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6453] <... futex resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6461] rt_sigprocmask(SIG_SETMASK, [], [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6453] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6457] <... creat resumed>) = 4 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6459] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6460] <... mmap resumed>) = 0x7eff81ead000 [pid 6459] <... futex resumed>) = 0 [pid 6457] <... futex resumed>) = 1 [pid 6455] <... futex resumed>) = 0 [pid 6461] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6460] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6460] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6459] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6455] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... openat resumed>) = 3 [pid 6455] <... futex resumed>) = 0 [pid 6455] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6460] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6462 attached [pid 6462] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6460] <... clone3 resumed> => {parent_tid=[6462]}, 88) = 6462 [pid 6462] <... rseq resumed>) = 0 [pid 6462] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6462] rt_sigprocmask(SIG_SETMASK, [], [pid 6449] <... write resumed>) = 53248 [pid 6462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] rt_sigprocmask(SIG_SETMASK, [], [pid 6449] <... futex resumed>) = 0 [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] exit_group(0 [pid 6460] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] <... futex resumed>) = 0 [pid 6460] <... futex resumed>) = 1 [pid 6462] memfd_create("syzkaller", 0) = 3 [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6458] <... futex resumed>) = ? [pid 6449] <... futex resumed>) = ? [pid 6447] <... exit_group resumed>) = ? [pid 6458] +++ exited with 0 +++ [ 181.324195][ T6456] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.342754][ T6454] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6449] +++ exited with 0 +++ [pid 6447] +++ exited with 0 +++ [pid 6460] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6447, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6455] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6454] <... write resumed>) = 53248 [pid 5073] getdents64(3, [pid 6454] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6454] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6452] exit_group(0 [pid 5073] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6459] <... futex resumed>) = ? [pid 6455] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6454] <... futex resumed>) = ? [pid 6452] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6455] <... futex resumed>) = 0 [pid 6454] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 181.372510][ T6457] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] unlink("./75/binderfs") = 0 [pid 6459] +++ exited with 0 +++ [pid 6455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6452] +++ exited with 0 +++ [pid 5071] <... ioctl resumed>) = 0 [pid 6462] <... write resumed>) = 524288 [pid 6455] <... mmap resumed>) = 0x7eff81e8c000 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6452, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6455] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] <... mprotect resumed>) = 0 [pid 6455] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5072] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6455] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] close(3./strace-static-x86_64: Process 6463 attached [pid 6463] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6455] <... clone3 resumed> => {parent_tid=[6463]}, 88) = 6463 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./75/binderfs" [pid 6463] <... rseq resumed>) = 0 [pid 6462] munmap(0x7eff79a00000, 138412032 [pid 6455] rt_sigprocmask(SIG_SETMASK, [], [pid 5072] <... unlink resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6463] set_robust_list(0x7eff81eac9a0, 24 [pid 6462] <... munmap resumed>) = 0 [pid 6462] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 181.400758][ T6457] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.406718][ T6456] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6464 attached [pid 6463] <... set_robust_list resumed>) = 0 [pid 6462] <... openat resumed>) = 4 [pid 6461] <... open resumed>) = 5 [pid 6455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] set_robust_list(0x5555571ca6a0, 24 [pid 6463] rt_sigprocmask(SIG_SETMASK, [], [pid 6462] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... umount2 resumed>) = 0 [pid 6455] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6464 [pid 6463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] <... set_robust_list resumed>) = 0 [pid 6463] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6455] <... futex resumed>) = 0 [pid 6461] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6461] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... umount2 resumed>) = 0 [pid 5073] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] chdir("./77" [pid 6455] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] <... chdir resumed>) = 0 [pid 6464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] newfstatat(AT_FDCWD, "./75/file1", [pid 6464] <... prctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] setpgid(0, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] <... setpgid resumed>) = 0 [pid 6464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5073] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] write(3, "1000", 4) = 4 [pid 5073] newfstatat(4, "", [pid 5072] newfstatat(AT_FDCWD, "./75/file1", [pid 6464] close(3 [pid 6462] <... ioctl resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6464] <... close resumed>) = 0 [pid 6462] close(3 [pid 5073] getdents64(4, [pid 5072] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6464] symlink("/dev/binderfs", "./binderfs" [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6462] <... close resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6462] close(4 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... openat resumed>) = 4 [pid 6462] <... close resumed>) = 0 [pid 5073] close(4 [pid 5072] newfstatat(4, "", [pid 6462] mkdir("./file1", 0777 [pid 5073] <... close resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6462] <... mkdir resumed>) = 0 [pid 5073] rmdir("./75/file1" [pid 5072] getdents64(4, [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [ 181.454390][ T6456] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.473508][ T6462] loop4: detected capacity change from 0 to 1024 [ 181.480301][ T6457] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.482138][ T6456] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6464] <... symlink resumed>) = 0 [pid 6463] <... open resumed>) = 5 [pid 5073] getdents64(3, [pid 5072] getdents64(4, [pid 6464] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6463] <... futex resumed>) = 1 [pid 6455] <... futex resumed>) = 0 [pid 6464] <... futex resumed>) = 0 [pid 5073] close(3 [pid 6464] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6463] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6464] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6462] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5073] <... close resumed>) = 0 [pid 5072] close(4 [pid 6464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6456] <... write resumed>) = 53248 [pid 5073] rmdir("./75" [pid 5072] <... close resumed>) = 0 [pid 6464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6456] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] rmdir("./75/file1" [pid 6462] <... mount resumed>) = 0 [pid 6453] exit_group(0 [pid 5073] mkdir("./76", 0777 [pid 5072] <... rmdir resumed>) = 0 [pid 6461] <... futex resumed>) = ? [pid 6453] <... exit_group resumed>) = ? [pid 6461] +++ exited with 0 +++ [pid 5073] <... mkdir resumed>) = 0 [pid 5072] getdents64(3, [pid 6464] <... mmap resumed>) = 0x7eff81ead000 [pid 6456] <... futex resumed>) = ? [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6464] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6462] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6456] +++ exited with 0 +++ [pid 6453] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6464] <... mprotect resumed>) = 0 [pid 6464] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6462] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6453, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] <... openat resumed>) = 3 [pid 5072] close(3 [pid 6464] <... rt_sigprocmask resumed>[], 8) = 0 [ 181.532789][ T6457] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.555228][ T6457] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6462] chdir("./file1" [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... close resumed>) = 0 ./strace-static-x86_64: Process 6465 attached [pid 6462] <... chdir resumed>) = 0 [pid 6465] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6464] <... clone3 resumed> => {parent_tid=[6465]}, 88) = 6465 [pid 6462] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] rmdir("./75" [pid 6465] <... rseq resumed>) = 0 [pid 6464] rt_sigprocmask(SIG_SETMASK, [], [pid 6462] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] <... rmdir resumed>) = 0 [pid 6465] set_robust_list(0x7eff81ecd9a0, 24 [pid 6464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6462] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] mkdir("./76", 0777 [pid 6465] <... set_robust_list resumed>) = 0 [pid 6464] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] <... futex resumed>) = 1 [pid 6460] <... futex resumed>) = 0 [pid 6457] <... write resumed>) = 53248 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... mkdir resumed>) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], [pid 6464] <... futex resumed>) = 0 [pid 6462] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6460] <... futex resumed>) = 0 [pid 6457] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6465] memfd_create("syzkaller", 0 [pid 6462] creat("./file0", 000 [pid 6460] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6457] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 5076] newfstatat(3, "", [pid 6465] <... memfd_create resumed>) = 3 [pid 6463] <... futex resumed>) = ? [pid 6462] <... creat resumed>) = 4 [pid 6457] +++ exited with 0 +++ [pid 6455] <... exit_group resumed>) = ? [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6463] +++ exited with 0 +++ [pid 6462] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 6462] <... futex resumed>) = 1 [pid 6460] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] ioctl(3, LOOP_CLR_FD [ 181.584933][ T6457] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6462] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6460] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] <... mmap resumed>) = 0x7eff79a00000 [pid 6460] <... futex resumed>) = 0 [pid 6455] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6455, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6465] <... write resumed>) = 524288 [pid 6460] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6465] munmap(0x7eff79a00000, 138412032 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./76/binderfs" [pid 5074] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... ioctl resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./76/binderfs") = 0 [pid 6465] <... munmap resumed>) = 0 [pid 5074] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 181.633054][ T6462] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.640380][ T6462] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] close(3 [pid 6465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6465] <... openat resumed>) = 4 [pid 6460] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6465] ioctl(4, LOOP_SET_FD, 3 [pid 6460] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] close(3 [pid 5074] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./76/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6460] <... futex resumed>) = 0 [pid 5074] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 6465] <... ioctl resumed>) = 0 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6465] close(3 [pid 5074] close(4 [pid 6465] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6465] close(4 [pid 6460] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] rmdir("./76/file1" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6465] <... close resumed>) = 0 [pid 6460] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... rmdir resumed>) = 0 [pid 6465] mkdir("./file1", 0777) = 0 [pid 6460] <... mprotect resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6466 [ 181.693763][ T6462] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.701118][ T6462] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.723813][ T6465] loop0: detected capacity change from 0 to 1024 [ 181.733102][ T6462] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] getdents64(3, [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6467 ./strace-static-x86_64: Process 6467 attached [pid 6460] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 ./strace-static-x86_64: Process 6466 attached [pid 6465] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5074] rmdir("./76" [pid 6466] set_robust_list(0x5555571ca6a0, 24 [pid 5074] <... rmdir resumed>) = 0 [pid 6466] <... set_robust_list resumed>) = 0 [pid 6460] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6467] set_robust_list(0x5555571ca6a0, 24 [pid 6466] chdir("./76" [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6467] <... set_robust_list resumed>) = 0 [pid 6460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] newfstatat(AT_FDCWD, "./76/file1", ./strace-static-x86_64: Process 6468 attached [pid 6467] chdir("./76" [pid 6466] <... chdir resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./77", 0777 [pid 5076] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6467] <... chdir resumed>) = 0 [pid 6468] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6467] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6460] <... clone3 resumed> => {parent_tid=[6468]}, 88) = 6468 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 6468] <... rseq resumed>) = 0 [pid 6467] <... prctl resumed>) = 0 [pid 6466] <... prctl resumed>) = 0 [pid 6460] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6468] set_robust_list(0x7eff81eac9a0, 24 [pid 6467] setpgid(0, 0 [pid 6466] setpgid(0, 0 [pid 6465] <... mount resumed>) = 0 [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6468] <... set_robust_list resumed>) = 0 [pid 6467] <... setpgid resumed>) = 0 [pid 6466] <... setpgid resumed>) = 0 [pid 6465] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6460] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6468] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6462] <... write resumed>) = 53248 [pid 6460] <... futex resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] <... openat resumed>) = 3 [pid 6466] <... openat resumed>) = 3 [pid 6462] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6468] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6467] write(3, "1000", 4 [pid 6466] write(3, "1000", 4 [pid 6465] <... openat resumed>) = 3 [pid 6462] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6468] <... open resumed>) = 5 [pid 6467] <... write resumed>) = 4 [pid 6466] <... write resumed>) = 4 [pid 6465] chdir("./file1" [pid 6462] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] getdents64(4, [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6467] close(3 [pid 6466] close(3 [pid 6465] <... chdir resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6468] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... close resumed>) = 0 [pid 6466] <... close resumed>) = 0 [pid 6465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] getdents64(4, [pid 6467] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6468] <... futex resumed>) = 1 [pid 6467] <... symlink resumed>) = 0 [pid 6466] symlink("/dev/binderfs", "./binderfs" [pid 6465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6460] <... futex resumed>) = 0 [pid 5076] close(4 [pid 6468] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 6466] <... symlink resumed>) = 0 [pid 6465] <... futex resumed>) = 1 [pid 6464] <... futex resumed>) = 0 [pid 6460] exit_group(0 [pid 5076] rmdir("./76/file1" [pid 6468] <... futex resumed>) = ? [pid 6467] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6466] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] creat("./file0", 000 [pid 6464] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] <... futex resumed>) = ? [pid 6460] <... exit_group resumed>) = ? [pid 5076] <... rmdir resumed>) = 0 [pid 6467] <... rt_sigaction resumed>NULL, 8) = 0 [ 181.749009][ T6462] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6464] <... futex resumed>) = 0 [pid 6467] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6462] +++ exited with 0 +++ [pid 5076] getdents64(3, [pid 6467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6467] <... mmap resumed>) = 0x7eff81ead000 [pid 6467] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] close(3 [pid 6467] <... mprotect resumed>) = 0 [pid 6464] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6466] <... futex resumed>) = 0 [pid 6465] <... creat resumed>) = 4 [pid 6468] +++ exited with 0 +++ [pid 6467] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6466] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6465] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] +++ exited with 0 +++ [pid 5076] <... close resumed>) = 0 [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6466] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6465] <... futex resumed>) = 1 [pid 6464] <... futex resumed>) = 0 [pid 5076] rmdir("./76" [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6460, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6465] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6464] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6464] <... futex resumed>) = 0 [pid 6466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6465] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6464] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6467] <... clone3 resumed> => {parent_tid=[6469]}, 88) = 6469 [pid 6466] <... mmap resumed>) = 0x7eff81ead000 [pid 6467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6467] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6467] <... futex resumed>) = 0 [pid 6467] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6466] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6469 attached [pid 5076] <... rmdir resumed>) = 0 [pid 6469] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6466] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6469] <... rseq resumed>) = 0 [pid 6466] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6469] set_robust_list(0x7eff81ecd9a0, 24 [pid 6466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] mkdir("./77", 0777 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6470 attached [pid 6469] <... set_robust_list resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6469] rt_sigprocmask(SIG_SETMASK, [], [pid 6466] <... clone3 resumed> => {parent_tid=[6470]}, 88) = 6470 [pid 5075] <... openat resumed>) = 3 [pid 6470] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] newfstatat(3, "", [pid 6470] <... rseq resumed>) = 0 [pid 6469] memfd_create("syzkaller", 0 [pid 6466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5075] getdents64(3, [pid 6469] <... memfd_create resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6469] <... mmap resumed>) = 0x7eff79a00000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6466] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] newfstatat(AT_FDCWD, "./75/binderfs", [pid 5074] close(3 [pid 6470] set_robust_list(0x7eff81ecd9a0, 24 [pid 6469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6470] <... set_robust_list resumed>) = 0 [pid 5075] unlink("./75/binderfs" [pid 6470] rt_sigprocmask(SIG_SETMASK, [], [pid 6466] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 6470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6470] memfd_create("syzkaller", 0 [pid 5075] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] <... memfd_create resumed>) = 3 [pid 6464] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6471 attached [pid 6464] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6471 [pid 6464] <... futex resumed>) = 0 [pid 6471] set_robust_list(0x5555571ca6a0, 24 [pid 6464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6471] <... set_robust_list resumed>) = 0 [pid 6470] <... mmap resumed>) = 0x7eff79a00000 [pid 6464] <... mmap resumed>) = 0x7eff81e8c000 [pid 6464] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6471] chdir("./77" [pid 6466] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6464] <... mprotect resumed>) = 0 [pid 6471] <... chdir resumed>) = 0 [ 181.851881][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.870292][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.887391][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6464] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6471] <... prctl resumed>) = 0 [pid 6464] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 6471] setpgid(0, 0 [pid 6464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6472 attached [pid 6471] <... setpgid resumed>) = 0 [pid 6469] <... write resumed>) = 524288 [pid 5075] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6464] <... clone3 resumed> => {parent_tid=[6472]}, 88) = 6472 [pid 6472] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6464] rt_sigprocmask(SIG_SETMASK, [], [pid 6472] <... rseq resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./75/file1", [pid 6464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] set_robust_list(0x7eff81eac9a0, 24 [pid 6471] <... openat resumed>) = 3 [pid 6464] <... futex resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6470] <... write resumed>) = 524288 [pid 6472] <... set_robust_list resumed>) = 0 [pid 6471] write(3, "1000", 4 [pid 6469] munmap(0x7eff79a00000, 138412032 [pid 6465] <... write resumed>) = 53248 [pid 6464] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] close(3 [pid 5075] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6472] rt_sigprocmask(SIG_SETMASK, [], [pid 6471] <... write resumed>) = 4 [pid 6469] <... munmap resumed>) = 0 [pid 6465] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6471] close(3 [pid 6469] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6465] <... futex resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 181.898468][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.910768][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 181.932766][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6472] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6471] <... close resumed>) = 0 [pid 6470] munmap(0x7eff79a00000, 138412032 [pid 6469] <... openat resumed>) = 4 [pid 6465] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... openat resumed>) = 4 [pid 6471] symlink("/dev/binderfs", "./binderfs" [pid 6470] <... munmap resumed>) = 0 [pid 6469] ioctl(4, LOOP_SET_FD, 3 [pid 5075] newfstatat(4, "", ./strace-static-x86_64: Process 6473 attached [pid 6472] <... open resumed>) = 5 [pid 6471] <... symlink resumed>) = 0 [pid 6470] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6469] <... ioctl resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6473] set_robust_list(0x5555571ca6a0, 24 [pid 6472] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... openat resumed>) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6473 [pid 6469] close(3 [pid 5075] getdents64(4, [pid 6473] <... set_robust_list resumed>) = 0 [pid 6472] <... futex resumed>) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6470] ioctl(4, LOOP_SET_FD, 3 [pid 6464] <... futex resumed>) = 0 [pid 6473] chdir("./77" [pid 6472] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6469] <... close resumed>) = 0 [pid 6464] exit_group(0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6473] <... chdir resumed>) = 0 [pid 6472] <... futex resumed>) = ? [pid 6471] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6469] close(4 [pid 6465] <... futex resumed>) = ? [pid 6464] <... exit_group resumed>) = ? [pid 5075] getdents64(4, [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6472] +++ exited with 0 +++ [pid 6471] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6470] <... ioctl resumed>) = 0 [pid 6469] <... close resumed>) = 0 [pid 6465] +++ exited with 0 +++ [pid 6464] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6473] <... prctl resumed>) = 0 [pid 6471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6469] mkdir("./file1", 0777 [pid 5075] close(4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6464, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6473] setpgid(0, 0 [pid 6471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6470] close(3 [pid 6469] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6473] <... setpgid resumed>) = 0 [pid 6471] <... mmap resumed>) = 0x7eff81ead000 [pid 6470] <... close resumed>) = 0 [pid 6469] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] rmdir("./75/file1" [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6471] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6470] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 6469] <... mount resumed>) = 0 [pid 5071] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] <... openat resumed>) = 3 [pid 6471] <... mprotect resumed>) = 0 [pid 6470] <... close resumed>) = 0 [pid 6469] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5075] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6473] write(3, "1000", 4 [pid 6471] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6470] mkdir("./file1", 0777 [pid 6469] <... openat resumed>) = 3 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6473] <... write resumed>) = 4 [pid 6471] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6470] <... mkdir resumed>) = 0 [pid 5075] close(3 [pid 5071] <... openat resumed>) = 3 [pid 6473] close(3 [pid 6471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5075] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", ./strace-static-x86_64: Process 6474 attached [pid 6473] <... close resumed>) = 0 [pid 6469] chdir("./file1" [pid 5075] rmdir("./75" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6474] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6473] symlink("/dev/binderfs", "./binderfs" [pid 6471] <... clone3 resumed> => {parent_tid=[6474]}, 88) = 6474 [pid 6470] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6469] <... chdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6474] <... rseq resumed>) = 0 [pid 6473] <... symlink resumed>) = 0 [pid 6471] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] mkdir("./76", 0777 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6474] set_robust_list(0x7eff81ecd9a0, 24 [pid 6473] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] <... set_robust_list resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [ 181.979124][ T6469] loop1: detected capacity change from 0 to 1024 [ 182.004324][ T6470] loop2: detected capacity change from 0 to 1024 [pid 6471] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] rt_sigprocmask(SIG_SETMASK, [], [pid 6473] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6471] <... futex resumed>) = 0 [pid 6469] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5075] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6473] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6471] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6474] memfd_create("syzkaller", 0 [pid 6473] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6469] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] unlink("./77/binderfs" [pid 6474] <... memfd_create resumed>) = 3 [pid 6473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6469] <... futex resumed>) = 1 [pid 6467] <... futex resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6469] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] <... mmap resumed>) = 0x7eff79a00000 [pid 6473] <... mmap resumed>) = 0x7eff81ead000 [pid 6470] <... mount resumed>) = 0 [pid 6469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6467] <... futex resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6473] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6470] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6469] creat("./file0", 000 [pid 6467] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] <... mprotect resumed>) = 0 [pid 6470] <... openat resumed>) = 3 [pid 6469] <... creat resumed>) = 4 [pid 6473] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6470] chdir("./file1" [pid 6469] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6470] <... chdir resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6470] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6467] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6475 attached [pid 6470] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6469] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./77/file1", [pid 6475] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6473] <... clone3 resumed> => {parent_tid=[6475]}, 88) = 6475 [pid 6470] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... futex resumed>) = 0 [pid 6475] <... rseq resumed>) = 0 [pid 6473] rt_sigprocmask(SIG_SETMASK, [], [pid 6470] <... futex resumed>) = 1 [pid 6467] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6466] <... futex resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6475] set_robust_list(0x7eff81ecd9a0, 24 [pid 6473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6470] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6466] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... set_robust_list resumed>) = 0 [pid 6473] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6466] <... futex resumed>) = 0 [pid 6475] rt_sigprocmask(SIG_SETMASK, [], [pid 6473] <... futex resumed>) = 0 [pid 6470] creat("./file0", 000 [pid 6466] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] <... write resumed>) = 524288 [pid 6475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6474] munmap(0x7eff79a00000, 138412032 [pid 6473] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6470] <... creat resumed>) = 4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6475] memfd_create("syzkaller", 0) = 3 [pid 6474] <... munmap resumed>) = 0 [pid 6470] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(3 [pid 5071] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... openat resumed>) = 4 [pid 6475] <... mmap resumed>) = 0x7eff79a00000 [pid 5071] newfstatat(4, "", [pid 6474] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6470] <... futex resumed>) = 1 [pid 6466] <... futex resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 6475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 182.108977][ T6469] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.148299][ T6469] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] rmdir("./77/file1" [pid 6474] <... openat resumed>) = 4 [pid 6470] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6466] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6476 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6476 attached [pid 5071] close(3 [pid 6476] set_robust_list(0x5555571ca6a0, 24 [pid 5071] <... close resumed>) = 0 [pid 6476] <... set_robust_list resumed>) = 0 [pid 5071] rmdir("./77" [pid 6476] chdir("./76" [pid 6474] ioctl(4, LOOP_SET_FD, 3 [pid 6466] <... futex resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6476] <... chdir resumed>) = 0 [pid 6476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6466] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] mkdir("./78", 0777 [pid 6476] <... prctl resumed>) = 0 [pid 6476] setpgid(0, 0 [pid 6467] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... mkdir resumed>) = 0 [pid 6467] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] <... setpgid resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6467] <... futex resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6467] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6476] <... openat resumed>) = 3 [pid 6467] <... mmap resumed>) = 0x7eff81e8c000 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6467] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6476] write(3, "1000", 4) = 4 [pid 6476] close(3) = 0 [pid 6475] <... write resumed>) = 524288 [pid 6476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6476] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6475] munmap(0x7eff79a00000, 138412032 [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6475] <... munmap resumed>) = 0 [pid 6476] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6477 attached => {parent_tid=[6477]}, 88) = 6477 [pid 6475] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6477] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6476] rt_sigprocmask(SIG_SETMASK, [], [pid 6474] <... ioctl resumed>) = 0 [pid 6474] close(3) = 0 [pid 6467] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6477] <... rseq resumed>) = 0 [pid 6476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6477] set_robust_list(0x7eff81ecd9a0, 24 [pid 6476] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] <... set_robust_list resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 6477] rt_sigprocmask(SIG_SETMASK, [], [ 182.157310][ T6469] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.169108][ T6474] loop3: detected capacity change from 0 to 1024 [ 182.187470][ T6470] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6476] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6474] close(4 [pid 6477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6477] memfd_create("syzkaller", 0 [pid 6474] <... close resumed>) = 0 [pid 6475] <... openat resumed>) = 4 [pid 6477] <... memfd_create resumed>) = 3 [pid 6475] ioctl(4, LOOP_SET_FD, 3 [pid 6474] mkdir("./file1", 0777 [pid 6467] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6466] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5071] <... ioctl resumed>) = 0 [pid 6477] <... mmap resumed>) = 0x7eff79a00000 [pid 6474] <... mkdir resumed>) = 0 [pid 6466] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6474] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [ 182.208885][ T6475] loop5: detected capacity change from 0 to 1024 [ 182.215373][ T6469] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.218802][ T6470] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.237536][ T6469] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.245073][ T6469] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6478 attached [pid 6477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6466] <... mmap resumed>) = 0x7eff81e8c000 [pid 6466] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6466] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] close(3 [pid 6466] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] <... close resumed>) = 0 [pid 6478] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6467] <... clone3 resumed> => {parent_tid=[6478]}, 88) = 6478 [pid 6466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6478] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 6479 attached [pid 6467] rt_sigprocmask(SIG_SETMASK, [], [pid 6466] <... clone3 resumed> => {parent_tid=[6479]}, 88) = 6479 [pid 6479] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6478] set_robust_list(0x7eff81eac9a0, 24 [pid 6467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6467] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6480 [pid 6478] <... set_robust_list resumed>) = 0 [pid 6479] <... rseq resumed>) = 0 [ 182.258000][ T6470] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.269233][ T6470] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.295409][ T6470] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6478] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] <... futex resumed>) = 0 [pid 6479] set_robust_list(0x7eff81eac9a0, 24 [pid 6478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6474] <... mount resumed>) = 0 [pid 6469] <... write resumed>) = 53248 [pid 6467] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6466] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6480 attached [pid 6479] <... set_robust_list resumed>) = 0 [pid 6478] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6477] <... write resumed>) = 524288 [pid 6474] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6469] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] <... futex resumed>) = 0 [pid 6480] set_robust_list(0x5555571ca6a0, 24 [pid 6479] rt_sigprocmask(SIG_SETMASK, [], [pid 6475] <... ioctl resumed>) = 0 [pid 6474] <... openat resumed>) = 3 [pid 6480] <... set_robust_list resumed>) = 0 [pid 6479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6478] <... open resumed>) = 5 [pid 6477] munmap(0x7eff79a00000, 138412032 [pid 6475] close(3 [pid 6474] chdir("./file1" [pid 6469] <... futex resumed>) = 0 [pid 6466] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] chdir("./78" [pid 6479] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6478] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] <... munmap resumed>) = 0 [pid 6475] <... close resumed>) = 0 [pid 6474] <... chdir resumed>) = 0 [pid 6469] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6480] <... chdir resumed>) = 0 [pid 6477] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6475] close(4 [pid 6474] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6480] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6477] <... openat resumed>) = 4 [pid 6475] <... close resumed>) = 0 [pid 6474] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6480] <... prctl resumed>) = 0 [pid 6477] ioctl(4, LOOP_SET_FD, 3 [pid 6475] mkdir("./file1", 0777 [pid 6474] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] setpgid(0, 0 [pid 6478] <... futex resumed>) = 1 [pid 6477] <... ioctl resumed>) = 0 [pid 6475] <... mkdir resumed>) = 0 [pid 6474] <... futex resumed>) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6467] <... futex resumed>) = 0 [pid 6480] <... setpgid resumed>) = 0 [pid 6479] <... open resumed>) = 5 [pid 6478] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6467] exit_group(0 [pid 6479] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6467] <... exit_group resumed>) = ? [pid 6479] <... futex resumed>) = 1 [pid 6478] <... futex resumed>) = ? [pid 6469] <... futex resumed>) = ? [pid 6466] <... futex resumed>) = 0 [pid 6480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6479] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] +++ exited with 0 +++ [pid 6474] creat("./file0", 000 [pid 6471] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] +++ exited with 0 +++ [pid 6467] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6467, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6475] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6474] <... creat resumed>) = 4 [pid 6471] <... futex resumed>) = 0 [pid 5072] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... openat resumed>) = 3 [pid 6474] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6471] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... openat resumed>) = 3 [pid 6471] <... futex resumed>) = 0 [pid 5072] newfstatat(3, "", [pid 6471] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6480] write(3, "1000", 4 [pid 6477] close(3 [pid 6475] <... mount resumed>) = 0 [pid 6470] <... write resumed>) = 53248 [pid 6480] <... write resumed>) = 4 [pid 6480] close(3) = 0 [pid 6480] symlink("/dev/binderfs", "./binderfs") = 0 [ 182.303923][ T6477] loop4: detected capacity change from 0 to 1024 [ 182.313613][ T6470] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6477] <... close resumed>) = 0 [pid 6475] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6470] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] getdents64(3, [pid 6480] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] exit_group(0 [pid 6480] <... futex resumed>) = 0 [pid 6479] <... futex resumed>) = ? [pid 6466] <... exit_group resumed>) = ? [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6477] close(4 [pid 6470] <... futex resumed>) = ? [pid 6479] +++ exited with 0 +++ [pid 5072] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6477] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6480] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6480] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5072] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6475] <... openat resumed>) = 3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6475] chdir("./file1") = 0 [pid 5072] unlink("./76/binderfs" [pid 6477] mkdir("./file1", 0777 [pid 6475] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5072] <... unlink resumed>) = 0 [pid 6477] <... mkdir resumed>) = 0 [pid 5072] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... mmap resumed>) = 0x7eff81ead000 [pid 6477] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6475] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6470] +++ exited with 0 +++ [pid 6466] +++ exited with 0 +++ [pid 6480] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6475] <... futex resumed>) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6471] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6466, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6480] <... mprotect resumed>) = 0 [pid 6475] creat("./file0", 000 [pid 6473] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = 0 [pid 6480] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6475] <... creat resumed>) = 4 [pid 6473] <... futex resumed>) = 0 [pid 6471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6480] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6475] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... mmap resumed>) = 0x7eff81e8c000 [pid 6480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6475] <... futex resumed>) = 0 [pid 6473] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5073] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6481 attached [pid 6475] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6473] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6481] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6480] <... clone3 resumed> => {parent_tid=[6481]}, 88) = 6481 [pid 6473] <... futex resumed>) = 0 [pid 6471] <... mprotect resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6481] <... rseq resumed>) = 0 [pid 6480] rt_sigprocmask(SIG_SETMASK, [], [pid 6473] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6481] set_robust_list(0x7eff81ecd9a0, 24 [pid 6480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6471] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6481] <... set_robust_list resumed>) = 0 [pid 6480] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6482 attached [pid 6481] rt_sigprocmask(SIG_SETMASK, [], [pid 6480] <... futex resumed>) = 0 [pid 6482] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6480] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6482] <... rseq resumed>) = 0 [pid 6481] memfd_create("syzkaller", 0 [pid 6482] set_robust_list(0x7eff81eac9a0, 24 [pid 6481] <... memfd_create resumed>) = 3 [pid 6482] <... set_robust_list resumed>) = 0 [pid 6481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6471] <... clone3 resumed> => {parent_tid=[6482]}, 88) = 6482 [pid 6482] rt_sigprocmask(SIG_SETMASK, [], [pid 6481] <... mmap resumed>) = 0x7eff79a00000 [pid 6471] rt_sigprocmask(SIG_SETMASK, [], [pid 6482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... openat resumed>) = 3 [pid 6482] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [ 182.369541][ T6474] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.385587][ T6474] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.394723][ T6474] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.402731][ T6474] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6471] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = 1 [pid 6482] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6471] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] <... open resumed>) = 5 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6482] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6482] <... futex resumed>) = 1 [pid 6482] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] <... mount resumed>) = 0 [pid 5073] unlink("./76/binderfs" [pid 6477] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6471] <... futex resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6477] <... openat resumed>) = 3 [pid 6473] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6473] <... futex resumed>) = 0 [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6473] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6473] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6483]}, 88) = 6483 [pid 6473] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6483 attached NULL, 8) = 0 [pid 6477] chdir("./file1" [ 182.447903][ T6474] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.457081][ T6475] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6483] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6473] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6483] <... rseq resumed>) = 0 [pid 6477] <... chdir resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6483] set_robust_list(0x7eff81eac9a0, 24 [pid 6473] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6483] <... set_robust_list resumed>) = 0 [pid 6481] <... write resumed>) = 524288 [pid 6483] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6483] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6477] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... umount2 resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./76/file1", [pid 6481] munmap(0x7eff79a00000, 138412032 [pid 6477] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6481] <... munmap resumed>) = 0 [pid 6477] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6477] <... futex resumed>) = 1 [pid 5073] newfstatat(AT_FDCWD, "./76/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6477] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6476] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6477] <... futex resumed>) = 0 [pid 6476] <... futex resumed>) = 1 [pid 5072] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6477] creat("./file0", 000 [pid 6476] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6481] ioctl(4, LOOP_SET_FD, 3 [pid 6477] <... creat resumed>) = 4 [pid 6474] <... write resumed>) = 53248 [pid 5073] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(4, "", [pid 6474] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6474] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 6481] <... ioctl resumed>) = 0 [pid 5073] newfstatat(4, "", [pid 6481] close(3 [pid 6477] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] exit_group(0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6482] <... futex resumed>) = ? [pid 6481] <... close resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 6477] <... futex resumed>) = 1 [pid 6474] <... futex resumed>) = ? [pid 6471] <... exit_group resumed>) = ? [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 6482] +++ exited with 0 +++ [pid 6481] close(4 [pid 6477] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6476] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] +++ exited with 0 +++ [pid 6471] +++ exited with 0 +++ [pid 6481] <... close resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6481] mkdir("./file1", 0777 [pid 6476] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6471, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... close resumed>) = 0 [ 182.489884][ T6474] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.501474][ T6475] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.522875][ T6481] loop0: detected capacity change from 0 to 1024 [ 182.531159][ T6475] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] rmdir("./76/file1" [pid 5074] <... openat resumed>) = 3 [pid 5074] newfstatat(3, "", [pid 6483] <... open resumed>) = 5 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6483] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, [pid 6483] <... futex resumed>) = 0 [pid 6483] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6481] <... mkdir resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... rmdir resumed>) = 0 [pid 5074] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 6481] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6481] <... mount resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 6481] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6481] <... openat resumed>) = 3 [ 182.554157][ T6475] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.575840][ T6477] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.584294][ T6475] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.591613][ T6475] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] unlink("./77/binderfs" [pid 6481] chdir("./file1" [pid 5073] close(4 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6476] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6476] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... close resumed>) = 0 [pid 5072] close(3 [pid 6481] <... chdir resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 6481] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6476] <... futex resumed>) = 0 [pid 5073] rmdir("./76/file1" [pid 5072] <... close resumed>) = 0 [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6481] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6476] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] rmdir("./76" [pid 6476] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6476] <... mprotect resumed>) = 0 [pid 5073] rmdir("./76" [pid 5072] mkdir("./77", 0777 [pid 6481] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6475] <... write resumed>) = 53248 [pid 5073] <... rmdir resumed>) = 0 [pid 6475] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] exit_group(0 [pid 6483] <... futex resumed>) = ? [pid 6475] <... futex resumed>) = ? [pid 6473] <... exit_group resumed>) = ? [pid 6483] +++ exited with 0 +++ [pid 6481] <... futex resumed>) = 1 [pid 6480] <... futex resumed>) = 0 [pid 6476] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6475] +++ exited with 0 +++ [pid 6473] +++ exited with 0 +++ [pid 5073] mkdir("./77", 0777 [pid 5072] <... mkdir resumed>) = 0 [pid 6480] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... mkdir resumed>) = 0 [pid 6481] creat("./file0", 000 [pid 6480] <... futex resumed>) = 0 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6481] <... creat resumed>) = 4 [pid 6480] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6473, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5074] <... umount2 resumed>) = 0 [pid 6481] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] <... clone3 resumed> => {parent_tid=[6484]}, 88) = 6484 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5072] <... openat resumed>) = 3 [pid 5074] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6481] <... futex resumed>) = 1 [pid 6480] <... futex resumed>) = 0 [pid 6476] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6484 attached [pid 6481] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6480] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] <... write resumed>) = 53248 [pid 6476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6484] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6480] <... futex resumed>) = 0 [pid 6477] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [ 182.598974][ T6477] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.599375][ T6477] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.615142][ T6477] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.637134][ T6477] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.646462][ T6477] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] newfstatat(AT_FDCWD, "./77/file1", [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6484] <... rseq resumed>) = 0 [pid 6481] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6480] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6477] <... futex resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6484] set_robust_list(0x7eff81eac9a0, 24 [pid 6477] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6484] <... set_robust_list resumed>) = 0 [pid 5074] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6484] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... ioctl resumed>) = 0 [pid 6480] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6480] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6480] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6480] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... ioctl resumed>) = 0 [ 182.676346][ T6481] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.684669][ T6481] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.692470][ T6481] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.699812][ T6481] hfsplus: request for non-existent node 16777216 in B*Tree [ 182.710339][ T6481] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6484] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6480] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] newfstatat(3, "", [pid 5074] <... openat resumed>) = 4 [pid 5072] close(3 [pid 6480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(4, "", [pid 6484] <... open resumed>) = 5 [pid 5076] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6480] <... clone3 resumed> => {parent_tid=[6485]}, 88) = 6485 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] getdents64(4, [pid 6480] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... close resumed>) = 0 [pid 6480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, ./strace-static-x86_64: Process 6485 attached [pid 6480] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6485] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6481] <... write resumed>) = 53248 [pid 6480] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6485] <... rseq resumed>) = 0 [pid 6484] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] unlink("./77/binderfs" [pid 5074] close(4 [pid 6485] set_robust_list(0x7eff81eac9a0, 24 [pid 6484] <... futex resumed>) = 1 [pid 6481] <... futex resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6485] <... set_robust_list resumed>) = 0 [pid 6484] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6481] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] exit_group(0 [pid 5074] rmdir("./77/file1" [pid 5073] <... close resumed>) = 0 [pid 6485] rt_sigprocmask(SIG_SETMASK, [], [pid 6484] <... futex resumed>) = ? [pid 6477] <... futex resumed>) = ? [pid 6476] <... exit_group resumed>) = ? [pid 5076] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... rmdir resumed>) = 0 [pid 6485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6484] +++ exited with 0 +++ [pid 6477] +++ exited with 0 +++ [pid 5074] getdents64(3, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6486 attached [pid 6485] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6476] +++ exited with 0 +++ [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6486 [pid 6485] <... open resumed>) = 5 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6486] set_robust_list(0x5555571ca6a0, 24 [pid 6485] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6476, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] close(3 [pid 6486] <... set_robust_list resumed>) = 0 [pid 6485] <... futex resumed>) = 1 [pid 6480] <... futex resumed>) = 0 [pid 5075] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 6486] chdir("./77" [pid 6485] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6480] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] rmdir("./77" [pid 6486] <... chdir resumed>) = 0 [pid 6485] <... futex resumed>) = ? [pid 6481] <... futex resumed>) = ? [pid 6480] <... exit_group resumed>) = ? [pid 5075] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6487 attached [pid 6481] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6487 [ 182.732135][ T6481] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6487] set_robust_list(0x5555571ca6a0, 24 [pid 6485] +++ exited with 0 +++ [pid 6480] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6487] <... set_robust_list resumed>) = 0 [pid 6486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] mkdir("./78", 0777 [pid 6486] <... prctl resumed>) = 0 [pid 6486] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6486] <... setpgid resumed>) = 0 [pid 6487] chdir("./77" [pid 5076] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5074] <... mkdir resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6480, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6487] <... chdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6487] <... prctl resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./77/file1", [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... openat resumed>) = 3 [pid 6486] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6487] setpgid(0, 0 [pid 6486] write(3, "1000", 4 [pid 5076] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] newfstatat(3, "", [pid 6487] <... setpgid resumed>) = 0 [pid 6486] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 6486] close(3 [pid 5075] newfstatat(AT_FDCWD, "./76/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6486] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5071] getdents64(3, [pid 6487] <... openat resumed>) = 3 [pid 6486] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... openat resumed>) = 4 [pid 5075] unlink("./76/binderfs" [pid 6487] write(3, "1000", 4 [pid 6486] <... symlink resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6487] <... write resumed>) = 4 [pid 6486] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6486] <... futex resumed>) = 0 [pid 6487] close(3 [pid 5076] getdents64(4, [pid 6487] <... close resumed>) = 0 [pid 6486] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6487] symlink("/dev/binderfs", "./binderfs" [pid 6486] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] <... symlink resumed>) = 0 [pid 6486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6487] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6487] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] unlink("./78/binderfs" [pid 6487] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] rmdir("./77/file1" [pid 5071] <... unlink resumed>) = 0 [pid 6487] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6487] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6487] <... mmap resumed>) = 0x7eff81ead000 [pid 6487] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] getdents64(3, [pid 6486] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6487] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6486] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6487] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6486] <... mprotect resumed>) = 0 [pid 5076] close(3) = 0 [pid 6487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] rmdir("./77" [pid 6486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... rmdir resumed>) = 0 [pid 6487] <... clone3 resumed> => {parent_tid=[6488]}, 88) = 6488 [pid 6487] rt_sigprocmask(SIG_SETMASK, [], [pid 6486] <... clone3 resumed> => {parent_tid=[6489]}, 88) = 6489 [pid 6487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] mkdir("./78", 0777 [pid 5071] <... umount2 resumed>) = 0 [pid 6487] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6488 attached [pid 6487] <... futex resumed>) = 0 [pid 6486] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 6487] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6486] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6489 attached [pid 6488] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6486] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6489] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6488] <... rseq resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6488] set_robust_list(0x7eff81ecd9a0, 24 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6488] <... set_robust_list resumed>) = 0 [pid 6488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6489] <... rseq resumed>) = 0 [pid 6488] memfd_create("syzkaller", 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5071] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] <... memfd_create resumed>) = 3 [pid 6488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6489] set_robust_list(0x7eff81ecd9a0, 24 [pid 5074] close(3 [pid 5071] newfstatat(AT_FDCWD, "./78/file1", [pid 6489] <... set_robust_list resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6489] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6489] memfd_create("syzkaller", 0) = 3 [pid 5071] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6489] <... mmap resumed>) = 0x7eff79a00000 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6490 [pid 6489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6490 attached [pid 6488] <... write resumed>) = 524288 [pid 5071] <... openat resumed>) = 4 [pid 6490] set_robust_list(0x5555571ca6a0, 24 [pid 5075] <... umount2 resumed>) = 0 [pid 5071] newfstatat(4, "", [pid 6490] <... set_robust_list resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6490] chdir("./78" [pid 5075] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 6490] <... chdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] getdents64(4, [pid 6490] <... prctl resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./76/file1", [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6490] setpgid(0, 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] close(4 [pid 6490] <... setpgid resumed>) = 0 [pid 5075] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... close resumed>) = 0 [pid 6490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] rmdir("./78/file1" [pid 5075] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 6490] <... openat resumed>) = 3 [pid 5075] <... openat resumed>) = 4 [pid 5071] getdents64(3, [pid 5075] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] close(3 [pid 6490] write(3, "1000", 4 [pid 5071] <... close resumed>) = 0 [pid 6490] <... write resumed>) = 4 [pid 5075] getdents64(4, [pid 5071] rmdir("./78" [pid 6488] munmap(0x7eff79a00000, 138412032 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... rmdir resumed>) = 0 [pid 5075] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6490] close(3 [pid 5075] <... close resumed>) = 0 [pid 6490] <... close resumed>) = 0 [pid 5075] rmdir("./76/file1" [pid 6490] symlink("/dev/binderfs", "./binderfs" [pid 6488] <... munmap resumed>) = 0 [pid 5076] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] mkdir("./79", 0777 [pid 6490] <... symlink resumed>) = 0 [pid 6488] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5076] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6490] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] getdents64(3, [pid 6490] <... futex resumed>) = 0 [pid 6488] <... openat resumed>) = 4 [pid 6490] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6490] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] close(3 [pid 6490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6489] <... write resumed>) = 524288 [pid 6488] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 5075] rmdir("./76" [pid 5071] <... openat resumed>) = 3 [pid 6490] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... rmdir resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6490] <... mprotect resumed>) = 0 [pid 6489] munmap(0x7eff79a00000, 138412032 [pid 6490] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] mkdir("./77", 0777./strace-static-x86_64: Process 6491 attached [pid 6489] <... munmap resumed>) = 0 [pid 6491] set_robust_list(0x5555571ca6a0, 24 [pid 6490] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 6490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6492 attached ) = 4 [pid 6492] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6490] <... clone3 resumed> => {parent_tid=[6492]}, 88) = 6492 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6492] <... rseq resumed>) = 0 [pid 6490] rt_sigprocmask(SIG_SETMASK, [], [pid 6489] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... openat resumed>) = 3 [pid 6492] set_robust_list(0x7eff81ecd9a0, 24 [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6492] <... set_robust_list resumed>) = 0 [pid 6491] <... set_robust_list resumed>) = 0 [pid 6490] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6491 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6492] rt_sigprocmask(SIG_SETMASK, [], [pid 6490] <... futex resumed>) = 0 [pid 6488] <... ioctl resumed>) = 0 [pid 6492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6491] chdir("./78" [pid 6488] close(3 [pid 6492] memfd_create("syzkaller", 0) = 3 [pid 6491] <... chdir resumed>) = 0 [pid 6490] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6488] <... close resumed>) = 0 [pid 6492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6488] close(4 [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6492] <... mmap resumed>) = 0x7eff79a00000 [pid 6489] <... ioctl resumed>) = 0 [pid 6488] <... close resumed>) = 0 [pid 6492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6491] <... prctl resumed>) = 0 [pid 6489] close(3 [pid 6488] mkdir("./file1", 0777 [pid 6491] setpgid(0, 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6489] <... close resumed>) = 0 [pid 6489] close(4 [pid 6491] <... setpgid resumed>) = 0 [pid 6489] <... close resumed>) = 0 [pid 6488] <... mkdir resumed>) = 0 [pid 6489] mkdir("./file1", 0777 [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6489] <... mkdir resumed>) = 0 [pid 6488] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6491] <... openat resumed>) = 3 [ 182.967247][ T6488] loop2: detected capacity change from 0 to 1024 [ 182.984969][ T6489] loop1: detected capacity change from 0 to 1024 [pid 6489] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6491] write(3, "1000", 4 [pid 6488] <... mount resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 6491] <... write resumed>) = 4 [pid 6488] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6491] close(3) = 0 [pid 6488] <... openat resumed>) = 3 [pid 6491] symlink("/dev/binderfs", "./binderfs" [pid 6488] chdir("./file1" [pid 6491] <... symlink resumed>) = 0 [pid 6488] <... chdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6491] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6493 attached [pid 6491] <... futex resumed>) = 0 [pid 6489] <... mount resumed>) = 0 [pid 6488] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6493] set_robust_list(0x5555571ca6a0, 24 [pid 6491] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6493] <... set_robust_list resumed>) = 0 [pid 6492] <... write resumed>) = 524288 [pid 6491] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6493 [pid 6491] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6492] munmap(0x7eff79a00000, 138412032 [pid 6489] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6492] <... munmap resumed>) = 0 [pid 6489] <... openat resumed>) = 3 [pid 6493] chdir("./79" [pid 6488] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6489] chdir("./file1" [pid 6488] <... futex resumed>) = 1 [pid 6493] <... chdir resumed>) = 0 [pid 6487] <... futex resumed>) = 0 [pid 6493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6492] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6489] <... chdir resumed>) = 0 [pid 6488] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6487] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(3 [pid 6493] <... prctl resumed>) = 0 [pid 6492] <... openat resumed>) = 4 [pid 6489] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6487] <... futex resumed>) = 0 [pid 6493] setpgid(0, 0 [pid 6492] ioctl(4, LOOP_SET_FD, 3 [pid 6491] <... mmap resumed>) = 0x7eff81ead000 [pid 6489] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6488] creat("./file0", 000 [pid 6487] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... close resumed>) = 0 [pid 6493] <... setpgid resumed>) = 0 [pid 6489] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6486] <... futex resumed>) = 0 [pid 6489] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6486] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6486] <... futex resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6486] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6488] <... creat resumed>) = 4 [pid 6491] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6493] <... openat resumed>) = 3 [pid 6489] creat("./file0", 000) = 4 [pid 6493] write(3, "1000", 4 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6488] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... write resumed>) = 4 [pid 6489] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6486] <... futex resumed>) = 0 [pid 6493] close(3 [pid 6488] <... futex resumed>) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6493] <... close resumed>) = 0 [pid 6492] <... ioctl resumed>) = 0 [pid 6491] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6489] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6487] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6494 attached [pid 6493] symlink("/dev/binderfs", "./binderfs" [pid 6492] close(3 [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6486] <... futex resumed>) = 0 [pid 6494] set_robust_list(0x5555571ca6a0, 24 [pid 6492] <... close resumed>) = 0 [ 183.057482][ T6492] loop3: detected capacity change from 0 to 1024 [ 183.088712][ T6489] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6489] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6487] <... futex resumed>) = 0 [pid 6486] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6494 ./strace-static-x86_64: Process 6495 attached [pid 6494] <... set_robust_list resumed>) = 0 [pid 6493] <... symlink resumed>) = 0 [pid 6492] close(4) = 0 [pid 6492] mkdir("./file1", 0777 [pid 6494] chdir("./77" [pid 6492] <... mkdir resumed>) = 0 [pid 6494] <... chdir resumed>) = 0 [pid 6494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6494] setpgid(0, 0 [pid 6495] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6491] <... clone3 resumed> => {parent_tid=[6495]}, 88) = 6495 [pid 6495] <... rseq resumed>) = 0 [pid 6493] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] rt_sigprocmask(SIG_SETMASK, [], [pid 6487] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6495] set_robust_list(0x7eff81ecd9a0, 24 [pid 6493] <... futex resumed>) = 0 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] <... set_robust_list resumed>) = 0 [pid 6494] <... setpgid resumed>) = 0 [pid 6493] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6492] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6491] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] rt_sigprocmask(SIG_SETMASK, [], [pid 6494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6493] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6491] <... futex resumed>) = 0 [pid 6495] memfd_create("syzkaller", 0 [pid 6494] <... openat resumed>) = 3 [pid 6493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6491] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] <... memfd_create resumed>) = 3 [pid 6494] write(3, "1000", 4 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6494] <... write resumed>) = 4 [pid 6494] close(3 [pid 6493] <... mmap resumed>) = 0x7eff81ead000 [pid 6494] <... close resumed>) = 0 [pid 6493] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6494] symlink("/dev/binderfs", "./binderfs" [pid 6495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6494] <... symlink resumed>) = 0 [pid 6493] <... mprotect resumed>) = 0 [pid 6494] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] <... mount resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 6493] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6492] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6495] <... mmap resumed>) = 0x7eff79a00000 [pid 6494] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6493] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6492] <... openat resumed>) = 3 [pid 6494] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6492] chdir("./file1" [pid 6494] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6492] <... chdir resumed>) = 0 [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6492] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6492] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6494] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6492] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] <... mprotect resumed>) = 0 [pid 6494] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6492] <... futex resumed>) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6494] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6492] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6490] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6490] <... futex resumed>) = 0 [pid 6492] creat("./file0", 000 [pid 6490] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6496 attached [pid 6494] <... clone3 resumed> => {parent_tid=[6496]}, 88) = 6496 [pid 6493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6492] <... creat resumed>) = 4 [pid 6496] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6494] rt_sigprocmask(SIG_SETMASK, [], [pid 6492] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6497 attached [pid 6496] <... rseq resumed>) = 0 [pid 6495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6497] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [ 183.106038][ T6488] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.120391][ T6489] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.139936][ T6488] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.150381][ T6489] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6493] <... clone3 resumed> => {parent_tid=[6497]}, 88) = 6497 [pid 6493] rt_sigprocmask(SIG_SETMASK, [], [pid 6497] <... rseq resumed>) = 0 [pid 6486] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] set_robust_list(0x7eff81ecd9a0, 24 [pid 6493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6497] <... set_robust_list resumed>) = 0 [pid 6493] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... futex resumed>) = 0 [pid 6497] rt_sigprocmask(SIG_SETMASK, [], [pid 6496] set_robust_list(0x7eff81ecd9a0, 24 [pid 6486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6496] <... set_robust_list resumed>) = 0 [pid 6486] <... mmap resumed>) = 0x7eff81e8c000 [pid 6496] rt_sigprocmask(SIG_SETMASK, [], [pid 6486] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] <... mprotect resumed>) = 0 [pid 6496] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6493] <... futex resumed>) = 0 [pid 6487] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6497] memfd_create("syzkaller", 0 [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6492] <... futex resumed>) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6487] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6493] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6497] <... memfd_create resumed>) = 3 [pid 6494] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6492] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6490] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6487] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6498 attached [pid 6496] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = 1 [pid 6492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6490] <... futex resumed>) = 0 [pid 6486] <... clone3 resumed> => {parent_tid=[6498]}, 88) = 6498 [pid 6498] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6496] memfd_create("syzkaller", 0 [pid 6494] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6492] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6490] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6486] rt_sigprocmask(SIG_SETMASK, [], [pid 6498] <... rseq resumed>) = 0 [pid 6496] <... memfd_create resumed>) = 3 [pid 6486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6498] set_robust_list(0x7eff81eac9a0, 24 [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6498] <... set_robust_list resumed>) = 0 [pid 6497] <... mmap resumed>) = 0x7eff79a00000 [pid 6495] <... write resumed>) = 524288 [pid 6487] <... mmap resumed>) = 0x7eff81e8c000 [pid 6498] rt_sigprocmask(SIG_SETMASK, [], [pid 6496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6486] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... mmap resumed>) = 0x7eff79a00000 [pid 6486] <... futex resumed>) = 0 [pid 6486] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6498] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6487] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6495] munmap(0x7eff79a00000, 138412032 [pid 6487] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6487] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6499 attached [pid 6499] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6487] <... clone3 resumed> => {parent_tid=[6499]}, 88) = 6499 [pid 6499] <... rseq resumed>) = 0 [pid 6499] set_robust_list(0x7eff81eac9a0, 24 [pid 6496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6487] rt_sigprocmask(SIG_SETMASK, [], [pid 6499] <... set_robust_list resumed>) = 0 [pid 6495] <... munmap resumed>) = 0 [pid 6487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6499] rt_sigprocmask(SIG_SETMASK, [], [pid 6487] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6487] <... futex resumed>) = 0 [ 183.168057][ T6488] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.178350][ T6492] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.187820][ T6489] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.196249][ T6488] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6499] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6495] <... openat resumed>) = 4 [pid 6490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6487] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6495] ioctl(4, LOOP_SET_FD, 3 [pid 6499] <... open resumed>) = 5 [pid 6495] <... ioctl resumed>) = 0 [pid 6490] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6487] <... futex resumed>) = 0 [pid 6499] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6490] <... futex resumed>) = 0 [pid 6490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6496] <... write resumed>) = 524288 [pid 6490] <... mmap resumed>) = 0x7eff81e8c000 [pid 6490] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6497] <... write resumed>) = 524288 [pid 6490] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6500 attached [pid 6500] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6500] set_robust_list(0x7eff81eac9a0, 24 [pid 6496] munmap(0x7eff79a00000, 138412032 [pid 6500] <... set_robust_list resumed>) = 0 [pid 6496] <... munmap resumed>) = 0 [pid 6500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 183.232769][ T6495] loop5: detected capacity change from 0 to 1024 [ 183.233516][ T6489] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.246951][ T6492] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.267717][ T6488] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6500] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] close(3 [pid 6497] munmap(0x7eff79a00000, 138412032 [pid 6496] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6490] <... clone3 resumed> => {parent_tid=[6500]}, 88) = 6500 [pid 6497] <... munmap resumed>) = 0 [pid 6496] <... openat resumed>) = 4 [pid 6495] <... close resumed>) = 0 [pid 6490] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] close(4 [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6497] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6496] ioctl(4, LOOP_SET_FD, 3 [pid 6495] <... close resumed>) = 0 [pid 6490] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = 0 [pid 6497] <... openat resumed>) = 4 [pid 6495] mkdir("./file1", 0777 [pid 6490] <... futex resumed>) = 1 [pid 6500] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6497] ioctl(4, LOOP_SET_FD, 3 [pid 6490] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... ioctl resumed>) = 0 [pid 6495] <... mkdir resumed>) = 0 [ 183.277413][ T6492] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.291622][ T6496] loop4: detected capacity change from 0 to 1024 [ 183.302914][ T6497] loop0: detected capacity change from 0 to 1024 [ 183.309763][ T6489] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.318476][ T6492] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6495] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6496] <... ioctl resumed>) = 0 [pid 6496] close(3 [pid 6497] close(3 [pid 6496] <... close resumed>) = 0 [pid 6497] <... close resumed>) = 0 [pid 6496] close(4 [pid 6497] close(4 [pid 6496] <... close resumed>) = 0 [pid 6497] <... close resumed>) = 0 [pid 6496] mkdir("./file1", 0777) = 0 [pid 6496] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6498] <... open resumed>) = 5 [pid 6497] mkdir("./file1", 0777 [pid 6489] <... write resumed>) = 53248 [pid 6498] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... mkdir resumed>) = 0 [pid 6489] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] exit_group(0 [pid 6498] <... futex resumed>) = ? [pid 6489] <... futex resumed>) = ? [pid 6486] <... exit_group resumed>) = ? [pid 6498] +++ exited with 0 +++ [pid 6489] +++ exited with 0 +++ [pid 6486] +++ exited with 0 +++ [pid 6497] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6496] <... mount resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6486, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6496] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6495] <... mount resumed>) = 0 [pid 6500] <... open resumed>) = 5 [pid 6497] <... mount resumed>) = 0 [pid 6496] <... openat resumed>) = 3 [pid 6500] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6496] chdir("./file1" [pid 6495] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6500] <... futex resumed>) = 1 [pid 6497] <... openat resumed>) = 3 [pid 6496] <... chdir resumed>) = 0 [pid 6495] <... openat resumed>) = 3 [pid 6490] <... futex resumed>) = 0 [ 183.327487][ T6488] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6500] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] chdir("./file1" [pid 6496] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6495] chdir("./file1" [pid 6488] <... write resumed>) = 53248 [pid 6488] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... chdir resumed>) = 0 [pid 6495] <... chdir resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6495] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] newfstatat(3, "", [pid 6487] exit_group(0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6499] <... futex resumed>) = ? [pid 6488] <... futex resumed>) = ? [pid 6487] <... exit_group resumed>) = ? [pid 5072] getdents64(3, [pid 6499] +++ exited with 0 +++ [pid 6497] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6496] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6495] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6488] +++ exited with 0 +++ [pid 6497] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6496] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... futex resumed>) = 1 [pid 6495] <... futex resumed>) = 1 [pid 6494] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6497] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6494] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... futex resumed>) = 1 [pid 6496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6495] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6494] <... futex resumed>) = 0 [pid 6493] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 6497] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] creat("./file0", 000 [pid 6495] creat("./file0", 000 [pid 6494] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6493] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6493] <... futex resumed>) = 0 [pid 6487] +++ exited with 0 +++ [pid 5072] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6493] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] creat("./file0", 000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6487, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5072] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6497] <... creat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./77/binderfs" [pid 6497] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6496] <... creat resumed>) = 4 [pid 6495] <... creat resumed>) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 6495] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6491] <... futex resumed>) = 0 [pid 5072] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... futex resumed>) = 1 [pid 6496] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6493] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6497] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] <... futex resumed>) = 1 [pid 6494] <... futex resumed>) = 0 [pid 6493] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6494] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6496] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6494] <... futex resumed>) = 0 [pid 6493] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... openat resumed>) = 3 [ 183.367902][ T6492] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.388818][ T6492] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6494] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6492] <... write resumed>) = 53248 [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6492] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./77/binderfs" [pid 6492] <... futex resumed>) = 0 [pid 6490] exit_group(0 [pid 5073] <... unlink resumed>) = 0 [pid 6492] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6490] <... exit_group resumed>) = ? [pid 5073] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6492] <... futex resumed>) = ? [pid 6500] <... futex resumed>) = ? [pid 6492] +++ exited with 0 +++ [pid 6500] +++ exited with 0 +++ [pid 6490] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6490, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5072] <... umount2 resumed>) = 0 [ 183.426270][ T6497] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.436801][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.462464][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6491] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6491] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] <... mprotect resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] getdents64(3, [pid 6491] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./78/binderfs" [pid 5072] newfstatat(AT_FDCWD, "./77/file1", [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6501 attached [pid 6493] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6501] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6493] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6501] <... rseq resumed>) = 0 [pid 6493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6491] <... clone3 resumed> => {parent_tid=[6501]}, 88) = 6501 [pid 6501] set_robust_list(0x7eff81eac9a0, 24 [pid 6493] <... mmap resumed>) = 0x7eff81e8c000 [pid 6491] rt_sigprocmask(SIG_SETMASK, [], [pid 6501] <... set_robust_list resumed>) = 0 [pid 6493] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6501] rt_sigprocmask(SIG_SETMASK, [], [pid 6494] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6493] <... mprotect resumed>) = 0 [pid 6491] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... openat resumed>) = 4 [pid 6501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6494] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6491] <... futex resumed>) = 0 [ 183.464535][ T6496] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.476574][ T6497] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.512925][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6501] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6494] <... futex resumed>) = 0 [pid 6493] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6491] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] newfstatat(4, "", [pid 6494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6494] <... mmap resumed>) = 0x7eff81e8c000 [pid 6494] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6493] <... clone3 resumed> => {parent_tid=[6502]}, 88) = 6502 [pid 6494] <... mprotect resumed>) = 0 [pid 6493] rt_sigprocmask(SIG_SETMASK, [], [pid 6494] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6494] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6493] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6493] <... futex resumed>) = 0 [pid 5072] getdents64(4, [pid 6493] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6502 attached [pid 6494] <... clone3 resumed> => {parent_tid=[6503]}, 88) = 6503 [pid 5074] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6502] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6494] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6503 attached [pid 6502] <... rseq resumed>) = 0 [pid 6494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] newfstatat(AT_FDCWD, "./78/file1", [pid 6502] set_robust_list(0x7eff81eac9a0, 24 [pid 6494] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6502] <... set_robust_list resumed>) = 0 [pid 6494] <... futex resumed>) = 0 [pid 5074] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6503] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6502] rt_sigprocmask(SIG_SETMASK, [], [pid 6494] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6503] <... rseq resumed>) = 0 [pid 6502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6503] set_robust_list(0x7eff81eac9a0, 24 [pid 6502] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... openat resumed>) = 4 [pid 6503] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6503] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] getdents64(4, [pid 6503] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./77/file1", [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(4 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./78/file1" [pid 5072] rmdir("./77/file1" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 183.520276][ T6496] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.520688][ T6496] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.520718][ T6496] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.535365][ T6497] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.554851][ T6496] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] <... rmdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5073] <... openat resumed>) = 4 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 6491] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] close(3 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./78") = 0 [pid 5074] mkdir("./79", 0777 [pid 6502] <... open resumed>) = 5 [pid 5073] getdents64(4, [pid 5072] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6502] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] rmdir("./77" [pid 6502] <... futex resumed>) = 0 [pid 6494] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6502] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6501] <... open resumed>) = 5 [pid 5073] getdents64(4, [pid 5072] <... rmdir resumed>) = 0 [pid 6501] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6501] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] mkdir("./78", 0777 [pid 5073] close(4) = 0 [pid 5072] <... mkdir resumed>) = 0 [ 183.570041][ T6497] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.579153][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.580261][ T6496] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.601182][ T6497] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.617406][ T6497] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] rmdir("./77/file1") = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] getdents64(3, [pid 5072] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] close(3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./77") = 0 [pid 6497] <... write resumed>) = 53248 [pid 6503] <... open resumed>) = 5 [pid 6496] <... write resumed>) = 53248 [pid 6495] <... write resumed>) = 53248 [pid 5073] mkdir("./78", 0777 [pid 6497] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6497] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6496] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 6493] exit_group(0 [pid 6491] exit_group(0 [pid 6502] <... futex resumed>) = ? [pid 6501] <... futex resumed>) = ? [pid 6497] <... futex resumed>) = ? [pid 6493] <... exit_group resumed>) = ? [pid 6491] <... exit_group resumed>) = ? [pid 6502] +++ exited with 0 +++ [pid 6501] +++ exited with 0 +++ [pid 6497] +++ exited with 0 +++ [pid 6493] +++ exited with 0 +++ [pid 5072] <... ioctl resumed>) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6493, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 6496] <... futex resumed>) = 0 [pid 6495] <... futex resumed>) = ? [pid 5071] <... restart_syscall resumed>) = 0 [ 183.626497][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree [ 183.640041][ T6495] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6503] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6495] +++ exited with 0 +++ [pid 6491] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6494] exit_group(0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6496] <... futex resumed>) = ? [pid 6494] <... exit_group resumed>) = ? [pid 5071] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6496] +++ exited with 0 +++ [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6491, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5074] close(3 [pid 5071] unlink("./79/binderfs" [pid 5074] <... close resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5071] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... restart_syscall resumed>) = 0 [pid 5072] close(3./strace-static-x86_64: Process 6504 attached [pid 6503] +++ exited with 0 +++ [pid 6494] +++ exited with 0 +++ [pid 5072] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6494, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5075] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6504 [pid 6504] set_robust_list(0x5555571ca6a0, 24 [pid 5076] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6505 [pid 5075] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6504] <... set_robust_list resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6505 attached [pid 5076] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(3, "", [pid 6505] set_robust_list(0x5555571ca6a0, 24 [pid 6504] chdir("./79" [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6505] <... set_robust_list resumed>) = 0 [pid 6504] <... chdir resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] getdents64(3, [pid 6505] chdir("./78" [pid 6504] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6505] <... chdir resumed>) = 0 [pid 6504] <... prctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6504] setpgid(0, 0 [pid 5076] getdents64(3, [pid 6504] <... setpgid resumed>) = 0 [pid 5075] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6505] <... prctl resumed>) = 0 [pid 6504] <... openat resumed>) = 3 [pid 5076] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6504] write(3, "1000", 4 [pid 5071] newfstatat(AT_FDCWD, "./79/file1", [pid 6504] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6504] close(3 [pid 5076] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6504] <... close resumed>) = 0 [pid 5075] unlink("./77/binderfs" [pid 6505] setpgid(0, 0 [pid 6504] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6505] <... setpgid resumed>) = 0 [pid 6504] <... symlink resumed>) = 0 [pid 5076] unlink("./78/binderfs" [pid 5075] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... unlink resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 6504] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6504] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6505] <... openat resumed>) = 3 [pid 6504] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 6505] write(3, "1000", 4 [pid 6504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6505] <... write resumed>) = 4 [pid 6504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] getdents64(4, [pid 6505] close(3 [pid 6504] <... mmap resumed>) = 0x7eff81ead000 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6505] <... close resumed>) = 0 [pid 6505] symlink("/dev/binderfs", "./binderfs" [pid 6504] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5071] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 6505] <... symlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6505] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5071] rmdir("./79/file1" [pid 6505] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5071] <... rmdir resumed>) = 0 [pid 6505] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6504] <... mprotect resumed>) = 0 [pid 6504] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5071] getdents64(3, [pid 6504] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 6505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] rmdir("./79"./strace-static-x86_64: Process 6506 attached [pid 6505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6504] <... clone3 resumed> => {parent_tid=[6506]}, 88) = 6506 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 6505] <... mmap resumed>) = 0x7eff81ead000 [pid 5075] newfstatat(AT_FDCWD, "./77/file1", [pid 5073] <... close resumed>) = 0 [pid 6504] rt_sigprocmask(SIG_SETMASK, [], [pid 6506] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6506] <... rseq resumed>) = 0 [pid 6504] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] mkdir("./80", 0777 [pid 6506] set_robust_list(0x7eff81ecd9a0, 24 [pid 6505] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] <... set_robust_list resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6506] rt_sigprocmask(SIG_SETMASK, [], [pid 6505] <... mprotect resumed>) = 0 [pid 6504] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6506] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6507 attached [pid 6506] memfd_create("syzkaller", 0 [pid 6505] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6507 [pid 6507] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6506] <... memfd_create resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6507] chdir("./78" [pid 6506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6505] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] newfstatat(AT_FDCWD, "./78/file1", [pid 5075] newfstatat(4, "", [pid 5071] <... openat resumed>) = 3 [pid 6506] <... mmap resumed>) = 0x7eff79a00000 [pid 6505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6507] <... chdir resumed>) = 0 [pid 6506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6507] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6507] <... prctl resumed>) = 0 [pid 6505] <... clone3 resumed> => {parent_tid=[6508]}, 88) = 6508 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6507] setpgid(0, 0 [pid 6505] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] getdents64(4, ./strace-static-x86_64: Process 6508 attached [pid 6507] <... setpgid resumed>) = 0 [pid 6505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6508] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6506] <... write resumed>) = 524288 [pid 6505] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] close(4 [pid 6508] <... rseq resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6505] <... futex resumed>) = 0 [pid 5075] rmdir("./77/file1" [pid 6505] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6508] set_robust_list(0x7eff81ecd9a0, 24 [pid 6506] munmap(0x7eff79a00000, 138412032 [pid 6508] <... set_robust_list resumed>) = 0 [pid 6507] <... openat resumed>) = 3 [pid 6506] <... munmap resumed>) = 0 [pid 5076] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 6508] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] getdents64(4, [pid 5075] getdents64(3, [pid 6508] memfd_create("syzkaller", 0 [pid 6507] write(3, "1000", 4 [pid 6506] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6508] <... memfd_create resumed>) = 3 [pid 6507] <... write resumed>) = 4 [pid 5076] close(4 [pid 5075] close(3 [pid 6508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6507] close(3 [pid 5076] <... close resumed>) = 0 [pid 6508] <... mmap resumed>) = 0x7eff79a00000 [pid 6507] <... close resumed>) = 0 [pid 6506] <... openat resumed>) = 4 [pid 5076] rmdir("./78/file1" [pid 5075] <... close resumed>) = 0 [pid 6507] symlink("/dev/binderfs", "./binderfs" [pid 6506] ioctl(4, LOOP_SET_FD, 3 [pid 5075] rmdir("./77" [pid 6507] <... symlink resumed>) = 0 [pid 6506] <... ioctl resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 6507] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6507] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6507] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6507] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6507] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5075] mkdir("./78", 0777 [pid 5076] rmdir("./78"./strace-static-x86_64: Process 6509 attached [pid 6508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6507] <... clone3 resumed> => {parent_tid=[6509]}, 88) = 6509 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] close(3 [pid 6509] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6507] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] mkdir("./79", 0777 [pid 6509] <... rseq resumed>) = 0 [pid 6507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6507] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6509] set_robust_list(0x7eff81ecd9a0, 24 [pid 6507] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... mkdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 6509] <... set_robust_list resumed>) = 0 [pid 6509] rt_sigprocmask(SIG_SETMASK, [], [pid 6508] <... write resumed>) = 524288 [pid 6506] close(3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6509] memfd_create("syzkaller", 0) = 3 [pid 6509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... openat resumed>) = 3 [pid 6508] munmap(0x7eff79a00000, 138412032 [pid 6506] <... close resumed>) = 0 [pid 6509] <... mmap resumed>) = 0x7eff79a00000 [pid 6506] close(4) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6508] <... munmap resumed>) = 0 [pid 6506] mkdir("./file1", 0777) = 0 [pid 6508] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6510 attached [pid 6510] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6510] chdir("./80") = 0 [pid 6510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6510] setpgid(0, 0) = 0 [pid 6510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6508] <... openat resumed>) = 4 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6510 [ 183.854269][ T6506] loop3: detected capacity change from 0 to 1024 [pid 6510] <... openat resumed>) = 3 [pid 6510] write(3, "1000", 4 [pid 6509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6508] ioctl(4, LOOP_SET_FD, 3 [pid 6506] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6510] <... write resumed>) = 4 [pid 6510] close(3) = 0 [pid 6510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6510] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6510] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6508] <... ioctl resumed>) = 0 [pid 6506] <... mount resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6506] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6510] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6510] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6506] chdir("./file1" [pid 6508] close(3 [pid 6510] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6508] <... close resumed>) = 0 [pid 6506] <... chdir resumed>) = 0 [pid 6510] <... mprotect resumed>) = 0 [pid 6509] <... write resumed>) = 524288 [pid 6508] close(4 [pid 6506] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6508] <... close resumed>) = 0 [pid 6510] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6509] munmap(0x7eff79a00000, 138412032 [pid 6508] mkdir("./file1", 0777 [pid 6506] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... ioctl resumed>) = 0 [pid 6506] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] close(3 [pid 6510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] close(3 [pid 5075] <... close resumed>) = 0 [pid 6509] <... munmap resumed>) = 0 [pid 6508] <... mkdir resumed>) = 0 [pid 6506] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6504] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6504] <... futex resumed>) = 0 [pid 6504] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6511 attached [pid 6511] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6506] creat("./file0", 000 [pid 6509] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6511] <... rseq resumed>) = 0 [pid 6510] <... clone3 resumed> => {parent_tid=[6511]}, 88) = 6511 [pid 6511] set_robust_list(0x7eff81ecd9a0, 24 [pid 6510] rt_sigprocmask(SIG_SETMASK, [], [pid 6511] <... set_robust_list resumed>) = 0 [pid 6510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6506] <... creat resumed>) = 4 [pid 6511] rt_sigprocmask(SIG_SETMASK, [], [pid 6510] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... openat resumed>) = 4 [pid 6511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6510] <... futex resumed>) = 0 [pid 6511] memfd_create("syzkaller", 0) = 3 [pid 6510] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [ 183.926030][ T6508] loop1: detected capacity change from 0 to 1024 [pid 6511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6509] ioctl(4, LOOP_SET_FD, 3 [pid 6508] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6506] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6504] <... futex resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6512 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6513 ./strace-static-x86_64: Process 6513 attached [pid 6513] set_robust_list(0x5555571ca6a0, 24) = 0 ./strace-static-x86_64: Process 6512 attached [pid 6513] chdir("./79" [pid 6506] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] <... chdir resumed>) = 0 [pid 6512] set_robust_list(0x5555571ca6a0, 24 [pid 6506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 6512] <... set_robust_list resumed>) = 0 [pid 6506] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6504] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] chdir("./78" [pid 6513] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6512] <... chdir resumed>) = 0 [pid 6513] <... prctl resumed>) = 0 [pid 6513] setpgid(0, 0) = 0 [pid 6513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6512] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6513] write(3, "1000", 4 [pid 6512] <... prctl resumed>) = 0 [pid 6513] <... write resumed>) = 4 [pid 6513] close(3) = 0 [pid 6513] symlink("/dev/binderfs", "./binderfs" [pid 6512] setpgid(0, 0 [pid 6513] <... symlink resumed>) = 0 [pid 6511] <... write resumed>) = 524288 [pid 6513] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6513] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6512] <... setpgid resumed>) = 0 [pid 6509] <... ioctl resumed>) = 0 [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6509] close(3 [pid 6513] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6512] <... openat resumed>) = 3 [pid 6511] munmap(0x7eff79a00000, 138412032 [pid 6509] <... close resumed>) = 0 [pid 6513] <... mprotect resumed>) = 0 [pid 6512] write(3, "1000", 4 [pid 6509] close(4 [pid 6508] <... mount resumed>) = 0 [pid 6509] <... close resumed>) = 0 [pid 6508] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6512] <... write resumed>) = 4 [pid 6509] mkdir("./file1", 0777 [pid 6513] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6512] close(3 [pid 6511] <... munmap resumed>) = 0 [pid 6509] <... mkdir resumed>) = 0 [pid 6508] <... openat resumed>) = 3 [pid 6513] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6512] <... close resumed>) = 0 [ 183.989106][ T6509] loop2: detected capacity change from 0 to 1024 [ 184.010066][ T6506] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6512] symlink("/dev/binderfs", "./binderfs" [pid 6509] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, ""./strace-static-x86_64: Process 6514 attached [pid 6513] <... clone3 resumed> => {parent_tid=[6514]}, 88) = 6514 [pid 6511] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6508] chdir("./file1" [pid 6504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6514] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6513] rt_sigprocmask(SIG_SETMASK, [], [pid 6512] <... symlink resumed>) = 0 [pid 6511] <... openat resumed>) = 4 [pid 6508] <... chdir resumed>) = 0 [pid 6504] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... rseq resumed>) = 0 [pid 6513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6511] ioctl(4, LOOP_SET_FD, 3 [pid 6508] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6504] <... futex resumed>) = 0 [pid 6514] set_robust_list(0x7eff81ecd9a0, 24 [pid 6513] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... set_robust_list resumed>) = 0 [pid 6513] <... futex resumed>) = 0 [pid 6512] <... futex resumed>) = 0 [pid 6508] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6514] rt_sigprocmask(SIG_SETMASK, [], [pid 6513] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6512] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6504] <... mmap resumed>) = 0x7eff81e8c000 [pid 6514] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6508] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6514] memfd_create("syzkaller", 0 [pid 6512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6509] <... mount resumed>) = 0 [pid 6514] <... memfd_create resumed>) = 3 [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6508] <... futex resumed>) = 1 [pid 6504] <... mprotect resumed>) = 0 [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6508] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6514] <... mmap resumed>) = 0x7eff79a00000 [pid 6509] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6504] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6512] <... mmap resumed>) = 0x7eff81ead000 [pid 6512] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6505] <... futex resumed>) = 0 [pid 6504] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6512] <... mprotect resumed>) = 0 [pid 6505] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6509] <... openat resumed>) = 3 [pid 6508] <... futex resumed>) = 0 [pid 6505] <... futex resumed>) = 1 ./strace-static-x86_64: Process 6515 attached [pid 6514] <... write resumed>) = 524288 [pid 6512] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6511] <... ioctl resumed>) = 0 [pid 6509] chdir("./file1" [pid 6508] creat("./file0", 000 [pid 6505] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6515] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6509] <... chdir resumed>) = 0 [ 184.048623][ T6506] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.059556][ T6511] loop0: detected capacity change from 0 to 1024 [ 184.081103][ T6506] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6515] <... rseq resumed>) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6509] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6508] <... creat resumed>) = 4 [pid 6504] <... clone3 resumed> => {parent_tid=[6515]}, 88) = 6515 [pid 6511] close(3 [pid 6509] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6511] <... close resumed>) = 0 [pid 6511] close(4) = 0 [pid 6511] mkdir("./file1", 0777) = 0 [pid 6511] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6515] set_robust_list(0x7eff81eac9a0, 24 [pid 6509] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6504] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6509] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6508] <... futex resumed>) = 1 [pid 6505] <... futex resumed>) = 0 [pid 6504] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... clone3 resumed> => {parent_tid=[6516]}, 88) = 6516 [pid 6515] <... set_robust_list resumed>) = 0 [pid 6508] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6505] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] rt_sigprocmask(SIG_SETMASK, [], [pid 6507] <... futex resumed>) = 0 [pid 6507] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] rt_sigprocmask(SIG_SETMASK, [], [pid 6509] <... futex resumed>) = 0 [pid 6507] <... futex resumed>) = 1 [pid 6505] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6516 attached [pid 6515] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6514] munmap(0x7eff79a00000, 138412032 [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6509] creat("./file0", 000 [pid 6507] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6505] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6516] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6514] <... munmap resumed>) = 0 [pid 6516] <... rseq resumed>) = 0 [pid 6516] set_robust_list(0x7eff81ecd9a0, 24 [pid 6514] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6516] <... set_robust_list resumed>) = 0 [pid 6514] <... openat resumed>) = 4 [pid 6516] rt_sigprocmask(SIG_SETMASK, [], [pid 6514] ioctl(4, LOOP_SET_FD, 3 [pid 6516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6509] <... creat resumed>) = 4 [pid 6516] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] <... open resumed>) = 5 [pid 6512] <... futex resumed>) = 0 [pid 6509] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6512] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6509] <... futex resumed>) = 1 [pid 6507] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 6516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6515] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] <... mount resumed>) = 0 [pid 6509] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6507] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 184.128962][ T6506] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.147310][ T6508] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.157486][ T6514] loop5: detected capacity change from 0 to 1024 [pid 6507] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6516] memfd_create("syzkaller", 0 [pid 6511] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6514] <... ioctl resumed>) = 0 [pid 6514] close(3) = 0 [pid 6511] <... openat resumed>) = 3 [pid 6511] chdir("./file1") = 0 [pid 6516] <... memfd_create resumed>) = 3 [pid 6514] close(4 [pid 6511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6514] <... close resumed>) = 0 [pid 6511] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] <... mmap resumed>) = 0x7eff79a00000 [pid 6514] mkdir("./file1", 0777 [pid 6511] <... futex resumed>) = 1 [pid 6510] <... futex resumed>) = 0 [pid 6516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6514] <... mkdir resumed>) = 0 [pid 6511] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6510] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6510] <... futex resumed>) = 0 [pid 6511] creat("./file0", 000 [pid 6510] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6511] <... creat resumed>) = 4 [pid 6514] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6511] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6510] <... futex resumed>) = 0 [pid 6505] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6510] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] <... futex resumed>) = 0 [pid 6510] <... futex resumed>) = 0 [ 184.172904][ T6506] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.177638][ T6509] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.180201][ T6506] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.197881][ T6508] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6510] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6516] <... write resumed>) = 524288 [pid 6507] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6505] <... mmap resumed>) = 0x7eff81e8c000 [pid 6507] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... mount resumed>) = 0 [pid 6507] <... futex resumed>) = 0 [pid 6505] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6514] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6514] chdir("./file1") = 0 [pid 6514] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6505] <... mprotect resumed>) = 0 [pid 6514] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6507] <... mmap resumed>) = 0x7eff81e8c000 [pid 6505] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6514] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6513] <... futex resumed>) = 0 [pid 6514] creat("./file0", 000 [pid 6513] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... creat resumed>) = 4 [pid 6513] <... futex resumed>) = 0 [pid 6513] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6516] munmap(0x7eff79a00000, 138412032) = 0 [pid 6514] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6514] <... futex resumed>) = 1 [ 184.225869][ T6511] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.248289][ T6509] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.261698][ T6508] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6513] <... futex resumed>) = 0 [pid 6510] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6507] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6506] <... write resumed>) = 53248 [pid 6505] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6514] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6513] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] <... futex resumed>) = 0 [pid 6510] <... futex resumed>) = 0 [pid 6506] <... futex resumed>) = 0 [pid 6516] <... openat resumed>) = 4 [pid 6513] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6507] <... mprotect resumed>) = 0 [pid 6505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6506] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6510] <... mmap resumed>) = 0x7eff81e8c000 [pid 6510] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6516] ioctl(4, LOOP_SET_FD, 3 [pid 6514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6510] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6517 attached [pid 6514] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6510] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6507] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6518]}, 88) = 6518 [ 184.290156][ T6509] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.294505][ T6511] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.299317][ T6508] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.310356][ T6516] loop4: detected capacity change from 0 to 1024 [ 184.316201][ T6509] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.329274][ T6514] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6517] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6516] <... ioctl resumed>) = 0 [pid 6510] rt_sigprocmask(SIG_SETMASK, [], [pid 6507] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6505] <... clone3 resumed> => {parent_tid=[6517]}, 88) = 6517 [pid 6504] exit_group(0./strace-static-x86_64: Process 6518 attached [pid 6516] close(3 [pid 6510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6518] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6517] <... rseq resumed>) = 0 [pid 6516] <... close resumed>) = 0 [pid 6515] <... futex resumed>) = ? [pid 6510] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6506] <... futex resumed>) = ? [pid 6505] rt_sigprocmask(SIG_SETMASK, [], [pid 6504] <... exit_group resumed>) = ? [ 184.331104][ T6508] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.350574][ T6509] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.360417][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 184.360437][ T28] audit: type=1800 audit(1708423261.975:475): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 ./strace-static-x86_64: Process 6519 attached [pid 6517] set_robust_list(0x7eff81eac9a0, 24 [pid 6516] close(4 [pid 6515] +++ exited with 0 +++ [pid 6510] <... futex resumed>) = 0 [pid 6506] +++ exited with 0 +++ [pid 6505] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6504] +++ exited with 0 +++ [pid 6518] <... rseq resumed>) = 0 [pid 6516] <... close resumed>) = 0 [pid 6518] set_robust_list(0x7eff81eac9a0, 24 [pid 6516] mkdir("./file1", 0777 [pid 6510] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... set_robust_list resumed>) = 0 [pid 6516] <... mkdir resumed>) = 0 [pid 6518] rt_sigprocmask(SIG_SETMASK, [], [pid 6516] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6518] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6518] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6517] <... set_robust_list resumed>) = 0 [pid 6513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6507] <... clone3 resumed> => {parent_tid=[6519]}, 88) = 6519 [pid 6505] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6504, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6517] rt_sigprocmask(SIG_SETMASK, [], [pid 6513] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6519] <... rseq resumed>) = 0 [pid 6517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6513] <... mmap resumed>) = 0x7eff81e8c000 [pid 6507] rt_sigprocmask(SIG_SETMASK, [], [pid 6505] <... futex resumed>) = 0 [pid 6513] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6519] set_robust_list(0x7eff81eac9a0, 24 [pid 6517] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6513] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6505] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6507] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6519] <... set_robust_list resumed>) = 0 [pid 6513] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6510] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6507] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6507] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6519] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... openat resumed>) = 3 [pid 6513] <... clone3 resumed> => {parent_tid=[6520]}, 88) = 6520 [pid 6513] rt_sigprocmask(SIG_SETMASK, [], [pid 6516] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6520 attached [pid 6516] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6513] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 184.373001][ T6511] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.409197][ T6514] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.412818][ T6509] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.424006][ T6508] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.433499][ T28] audit: type=1800 audit(1708423262.025:476): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 184.445777][ T6514] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.454514][ T28] audit: type=1800 audit(1708423262.025:477): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5074] newfstatat(3, "", [pid 6508] <... write resumed>) = 53248 [pid 6520] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6517] <... open resumed>) = 5 [pid 6516] <... openat resumed>) = 3 [pid 6513] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6507] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6505] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6519] <... open resumed>) = 5 [pid 5074] getdents64(3, [pid 6519] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... write resumed>) = 53248 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6519] <... futex resumed>) = 0 [pid 5074] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6519] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6520] <... rseq resumed>) = 0 [pid 6516] chdir("./file1" [pid 6513] <... futex resumed>) = 0 [pid 5074] unlink("./79/binderfs" [pid 6520] set_robust_list(0x7eff81eac9a0, 24 [pid 6516] <... chdir resumed>) = 0 [pid 6513] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... unlink resumed>) = 0 [pid 6516] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5074] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6520] <... set_robust_list resumed>) = 0 [pid 6518] <... open resumed>) = 5 [pid 6517] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6509] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] rt_sigprocmask(SIG_SETMASK, [], [pid 6518] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6516] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = 0 [pid 6508] <... futex resumed>) = 0 [pid 6507] exit_group(0 [pid 6505] exit_group(0 [pid 6520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] <... futex resumed>) = ? [pid 6518] <... futex resumed>) = 0 [pid 6516] <... futex resumed>) = 1 [pid 6512] <... futex resumed>) = 0 [pid 6507] <... exit_group resumed>) = ? [pid 6505] <... exit_group resumed>) = ? [pid 6520] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6519] +++ exited with 0 +++ [pid 6518] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6517] +++ exited with 0 +++ [pid 6516] creat("./file0", 000 [pid 6512] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] +++ exited with 0 +++ [pid 6516] <... creat resumed>) = 4 [pid 6508] +++ exited with 0 +++ [pid 6507] +++ exited with 0 +++ [pid 6505] +++ exited with 0 +++ [pid 6516] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... futex resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6505, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6516] <... futex resumed>) = 0 [pid 6512] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6507, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6516] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6512] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6512] <... futex resumed>) = 0 [pid 6512] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5072] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 5072] newfstatat(3, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] getdents64(3, [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./78/binderfs", [ 184.484310][ T6511] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.503502][ T28] audit: type=1800 audit(1708423262.115:478): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 184.534068][ T6516] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] unlink("./78/binderfs") = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6513] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] unlink("./78/binderfs") = 0 [pid 5072] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6512] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6512] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6521]}, 88) = 6521 [pid 6512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6512] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6512] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6521 attached [pid 6521] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6521] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6521] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [ 184.541657][ T6511] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.549712][ T6516] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 184.588519][ T6516] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.596961][ T6511] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.606890][ T28] audit: type=1800 audit(1708423262.205:479): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 184.622076][ T6516] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] newfstatat(AT_FDCWD, "./78/file1", [pid 6512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] newfstatat(AT_FDCWD, "./79/file1", [pid 5073] <... umount2 resumed>) = 0 [pid 6511] <... write resumed>) = 53248 [pid 6511] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6511] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6510] exit_group(0 [pid 6511] <... futex resumed>) = ? [pid 6510] <... exit_group resumed>) = ? [pid 6511] +++ exited with 0 +++ [pid 5073] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6518] <... futex resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6520] <... open resumed>) = 5 [pid 6518] +++ exited with 0 +++ [pid 6510] +++ exited with 0 +++ [pid 5074] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./78/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6510, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6520] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6520] <... futex resumed>) = 0 [pid 5073] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6520] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, [pid 5072] newfstatat(4, "", [pid 5074] getdents64(4, [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./78/file1") = 0 [pid 5073] getdents64(3, [pid 5072] getdents64(4, [pid 5071] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] getdents64(4, [ 184.628517][ T6514] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.654181][ T6514] hfsplus: request for non-existent node 16777216 in B*Tree [ 184.671203][ T6514] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] close(3 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6521] <... open resumed>) = 5 [pid 6514] <... write resumed>) = 53248 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] getdents64(4, [pid 5071] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6514] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(4 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6521] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] <... futex resumed>) = 0 [pid 6513] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5073] rmdir("./78" [pid 5072] close(4 [pid 5071] <... openat resumed>) = 3 [pid 6521] <... futex resumed>) = 0 [pid 6520] <... futex resumed>) = ? [pid 6513] <... exit_group resumed>) = ? [pid 5074] rmdir("./79/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 6521] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6520] +++ exited with 0 +++ [pid 6514] +++ exited with 0 +++ [pid 6513] +++ exited with 0 +++ [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./79", 0777 [pid 5072] rmdir("./78/file1" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6513, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... openat resumed>) = 3 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] <... restart_syscall resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5074] close(3 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [ 184.686731][ T6516] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... close resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6516] <... write resumed>) = 53248 [pid 5076] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./79" [pid 5072] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6516] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6516] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5072] rmdir("./78" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] mkdir("./80", 0777 [pid 6512] exit_group(0 [pid 5076] <... openat resumed>) = 3 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] unlink("./80/binderfs" [pid 6521] <... futex resumed>) = ? [pid 6521] +++ exited with 0 +++ [pid 6516] <... futex resumed>) = ? [pid 6516] +++ exited with 0 +++ [pid 5074] <... mkdir resumed>) = 0 [pid 5072] mkdir("./79", 0777 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6512] <... exit_group resumed>) = ? [pid 5076] newfstatat(3, "", [pid 5074] <... openat resumed>) = 3 [pid 5071] <... unlink resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] getdents64(3, [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5076] unlink("./79/binderfs") = 0 [pid 5076] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6512] +++ exited with 0 +++ [pid 5071] <... umount2 resumed>) = 0 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6512, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5074] <... ioctl resumed>) = 0 [pid 5071] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./80/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 184.726173][ T6516] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(3, "", [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6522 attached [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6522] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6522 [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] chdir("./80" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(4, "", [pid 6522] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6522] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6523 [pid 6522] <... prctl resumed>) = 0 [pid 6522] setpgid(0, 0 [pid 5076] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6522] <... setpgid resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(AT_FDCWD, "./79/file1", [pid 5075] unlink("./78/binderfs" [pid 5071] getdents64(4, ./strace-static-x86_64: Process 6523 attached [pid 6522] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] close(3 [pid 6522] write(3, "1000", 4) = 4 [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6523] set_robust_list(0x5555571ca6a0, 24 [pid 6522] close(3 [pid 5071] getdents64(4, [pid 6523] <... set_robust_list resumed>) = 0 [pid 6522] <... close resumed>) = 0 [pid 5075] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6522] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5071] close(4 [pid 6522] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6522] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6522] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... close resumed>) = 0 [pid 6523] chdir("./79" [pid 6522] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] rmdir("./80/file1" [pid 6523] <... chdir resumed>) = 0 [pid 6522] <... mprotect resumed>) = 0 [pid 6522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... openat resumed>) = 4 [pid 6522] <... clone3 resumed> => {parent_tid=[6525]}, 88) = 6525 [pid 6522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5076] newfstatat(4, "", [pid 6522] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6522] <... futex resumed>) = 0 [pid 5076] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6522] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6525 attached [pid 5076] close(4 [pid 6525] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 5076] <... close resumed>) = 0 [pid 6525] <... rseq resumed>) = 0 [pid 5076] rmdir("./79/file1" [pid 6523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6525] set_robust_list(0x7eff81ecd9a0, 24 [pid 5076] getdents64(3, [pid 6525] <... set_robust_list resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6525] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] close(3 [pid 6525] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... close resumed>) = 0 [pid 6525] memfd_create("syzkaller", 0 [pid 5076] rmdir("./79") = 0 [pid 6525] <... memfd_create resumed>) = 3 [pid 6525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 5076] mkdir("./80", 0777) = 0 ./strace-static-x86_64: Process 6524 attached [pid 6525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6523] <... prctl resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... umount2 resumed>) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6524 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6524] set_robust_list(0x5555571ca6a0, 24 [pid 6523] setpgid(0, 0 [pid 5075] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6524] <... set_robust_list resumed>) = 0 [pid 6523] <... setpgid resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./78/file1", [pid 5071] <... close resumed>) = 0 [pid 6524] chdir("./79" [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6524] <... chdir resumed>) = 0 [pid 6523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] rmdir("./80" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6523] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5071] mkdir("./81", 0777 [pid 5075] newfstatat(4, "", [pid 6524] <... prctl resumed>) = 0 [pid 6523] write(3, "1000", 4 [pid 6524] setpgid(0, 0) = 0 [pid 6523] <... write resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6523] close(3 [pid 5075] getdents64(4, [pid 5071] <... mkdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6523] <... close resumed>) = 0 [pid 6523] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 6524] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 6523] <... symlink resumed>) = 0 [pid 6524] write(3, "1000", 4 [pid 6523] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... close resumed>) = 0 [pid 6524] <... write resumed>) = 4 [pid 6523] <... futex resumed>) = 0 [pid 5075] rmdir("./78/file1" [pid 6524] close(3 [pid 6523] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6524] <... close resumed>) = 0 [pid 6525] <... write resumed>) = 524288 [pid 6523] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6524] symlink("/dev/binderfs", "./binderfs" [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6524] <... symlink resumed>) = 0 [pid 6523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] close(3 [pid 6524] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 6524] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6523] <... mmap resumed>) = 0x7eff81ead000 [pid 5075] rmdir("./78" [pid 6524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6523] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6523] <... mprotect resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 6525] munmap(0x7eff79a00000, 138412032) = 0 [pid 6524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6524] <... mmap resumed>) = 0x7eff81ead000 [pid 6525] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6523] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] mkdir("./79", 0777 [pid 6525] <... openat resumed>) = 4 [pid 6525] ioctl(4, LOOP_SET_FD, 3 [pid 6524] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6523] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] close(3 [pid 5075] <... mkdir resumed>) = 0 [pid 5071] close(3 [pid 6524] <... mprotect resumed>) = 0 [pid 6523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 ./strace-static-x86_64: Process 6526 attached [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6526] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6526] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6526] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] <... ioctl resumed>) = 0 [pid 6524] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6523] <... clone3 resumed> => {parent_tid=[6526]}, 88) = 6526 [pid 5075] <... openat resumed>) = 3 [pid 6523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6525] close(3) = 0 [pid 6523] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] close(4./strace-static-x86_64: Process 6528 attached ./strace-static-x86_64: Process 6527 attached [pid 6526] <... futex resumed>) = 0 [pid 6524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6523] <... futex resumed>) = 1 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 6528] set_robust_list(0x5555571ca6a0, 24 [pid 6524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6523] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6528] <... set_robust_list resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6527 [pid 6527] set_robust_list(0x5555571ca6a0, 24 [pid 6526] memfd_create("syzkaller", 0 [pid 6525] <... close resumed>) = 0 [pid 6526] <... memfd_create resumed>) = 3 [pid 6525] mkdir("./file1", 0777./strace-static-x86_64: Process 6529 attached [pid 6528] chdir("./80" [pid 6526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6525] <... mkdir resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6528 [pid 6529] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6528] <... chdir resumed>) = 0 [pid 6524] <... clone3 resumed> => {parent_tid=[6529]}, 88) = 6529 [pid 6529] <... rseq resumed>) = 0 [pid 6528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6529] set_robust_list(0x7eff81ecd9a0, 24 [pid 6528] <... prctl resumed>) = 0 [pid 6524] rt_sigprocmask(SIG_SETMASK, [], [pid 6529] <... set_robust_list resumed>) = 0 [pid 6528] setpgid(0, 0 [pid 6524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6529] rt_sigprocmask(SIG_SETMASK, [], [pid 6528] <... setpgid resumed>) = 0 [pid 6524] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6524] <... futex resumed>) = 0 [pid 6527] <... set_robust_list resumed>) = 0 [pid 6526] <... mmap resumed>) = 0x7eff79a00000 [ 184.946195][ T6525] loop3: detected capacity change from 0 to 1024 [pid 6524] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6525] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6529] memfd_create("syzkaller", 0 [pid 6528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6527] chdir("./81" [pid 6526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6529] <... memfd_create resumed>) = 3 [pid 6528] <... openat resumed>) = 3 [pid 6527] <... chdir resumed>) = 0 [pid 6529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6528] write(3, "1000", 4 [pid 6527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6525] <... mount resumed>) = 0 [pid 6527] <... prctl resumed>) = 0 [pid 6525] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6527] setpgid(0, 0 [pid 6525] <... openat resumed>) = 3 [pid 6527] <... setpgid resumed>) = 0 [pid 6525] chdir("./file1" [pid 6527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6525] <... chdir resumed>) = 0 [pid 6527] <... openat resumed>) = 3 [pid 6527] write(3, "1000", 4 [pid 6525] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6527] <... write resumed>) = 4 [pid 6527] close(3 [pid 6525] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6527] <... close resumed>) = 0 [pid 6525] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] symlink("/dev/binderfs", "./binderfs" [pid 6525] <... futex resumed>) = 1 [pid 6522] <... futex resumed>) = 0 [pid 6529] <... mmap resumed>) = 0x7eff79a00000 [pid 6527] <... symlink resumed>) = 0 [pid 6525] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6522] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] <... write resumed>) = 4 [pid 6527] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6522] <... futex resumed>) = 0 [pid 6528] close(3 [pid 6527] <... futex resumed>) = 0 [pid 6525] creat("./file0", 000 [pid 6522] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6528] <... close resumed>) = 0 [pid 6527] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6525] <... creat resumed>) = 4 [pid 6528] symlink("/dev/binderfs", "./binderfs" [pid 6527] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6525] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] <... symlink resumed>) = 0 [pid 6527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6525] <... futex resumed>) = 1 [pid 6522] <... futex resumed>) = 0 [pid 6528] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6522] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6528] <... futex resumed>) = 0 [pid 6527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6526] <... write resumed>) = 524288 [pid 6525] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6522] <... futex resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6527] <... mmap resumed>) = 0x7eff81ead000 [pid 6526] munmap(0x7eff79a00000, 138412032 [pid 6522] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6526] <... munmap resumed>) = 0 [pid 6528] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6527] <... mprotect resumed>) = 0 [pid 6529] <... write resumed>) = 524288 [pid 6528] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6527] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6526] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5075] close(3 [pid 6528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6527] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6526] <... openat resumed>) = 4 [pid 6527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6526] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6531 attached [pid 6529] munmap(0x7eff79a00000, 138412032 [pid 6528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6526] <... ioctl resumed>) = 0 [pid 6531] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6530 [pid 6527] <... clone3 resumed> => {parent_tid=[6531]}, 88) = 6531 [pid 6529] <... munmap resumed>) = 0 [pid 6531] set_robust_list(0x7eff81ecd9a0, 24 [pid 6527] rt_sigprocmask(SIG_SETMASK, [], [pid 6528] <... mmap resumed>) = 0x7eff81ead000 [pid 6531] <... set_robust_list resumed>) = 0 [pid 6529] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6527] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6530 attached [pid 6531] rt_sigprocmask(SIG_SETMASK, [], [pid 6527] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6529] <... openat resumed>) = 4 [pid 6528] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6530] set_robust_list(0x5555571ca6a0, 24 [pid 6531] memfd_create("syzkaller", 0 [pid 6527] <... futex resumed>) = 0 [pid 6530] <... set_robust_list resumed>) = 0 [pid 6531] <... memfd_create resumed>) = 3 [pid 6529] ioctl(4, LOOP_SET_FD, 3 [pid 6528] <... mprotect resumed>) = 0 [pid 6527] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6530] chdir("./79" [pid 6531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6528] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6530] <... chdir resumed>) = 0 [pid 6528] <... rt_sigprocmask resumed>[], 8) = 0 [ 185.077776][ T6525] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.095030][ T6526] loop2: detected capacity change from 0 to 1024 [pid 6530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6531] <... mmap resumed>) = 0x7eff79a00000 [pid 6528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6522] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6532 attached [pid 6530] <... prctl resumed>) = 0 [pid 6531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6529] <... ioctl resumed>) = 0 [pid 6528] <... clone3 resumed> => {parent_tid=[6532]}, 88) = 6532 [pid 6526] close(3 [pid 6522] <... mmap resumed>) = 0x7eff81e8c000 [pid 6532] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6526] <... close resumed>) = 0 [pid 6522] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6526] close(4 [pid 6522] <... mprotect resumed>) = 0 [pid 6526] <... close resumed>) = 0 [pid 6522] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6530] setpgid(0, 0) = 0 [pid 6526] mkdir("./file1", 0777 [pid 6522] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6528] rt_sigprocmask(SIG_SETMASK, [], [pid 6526] <... mkdir resumed>) = 0 [pid 6522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6532] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 6533 attached [pid 6532] set_robust_list(0x7eff81ecd9a0, 24 [pid 6530] <... openat resumed>) = 3 [pid 6529] close(3 [pid 6528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6526] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6533] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6532] <... set_robust_list resumed>) = 0 [pid 6530] write(3, "1000", 4 [pid 6531] <... write resumed>) = 524288 [pid 6529] <... close resumed>) = 0 [pid 6528] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... rseq resumed>) = 0 [pid 6532] rt_sigprocmask(SIG_SETMASK, [], [pid 6530] <... write resumed>) = 4 [pid 6522] <... clone3 resumed> => {parent_tid=[6533]}, 88) = 6533 [pid 6530] close(3 [pid 6522] rt_sigprocmask(SIG_SETMASK, [], [pid 6530] <... close resumed>) = 0 [pid 6522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] symlink("/dev/binderfs", "./binderfs" [pid 6522] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] set_robust_list(0x7eff81eac9a0, 24 [pid 6532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] <... symlink resumed>) = 0 [pid 6531] munmap(0x7eff79a00000, 138412032 [pid 6529] close(4 [pid 6528] <... futex resumed>) = 0 [pid 6522] <... futex resumed>) = 0 [ 185.123758][ T6525] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.132578][ T6529] loop1: detected capacity change from 0 to 1024 [ 185.162488][ T6525] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6530] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6522] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6533] <... set_robust_list resumed>) = 0 [pid 6532] memfd_create("syzkaller", 0 [pid 6530] <... mmap resumed>) = 0x7eff81ead000 [pid 6531] <... munmap resumed>) = 0 [pid 6529] <... close resumed>) = 0 [pid 6528] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6526] <... mount resumed>) = 0 [pid 6530] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6526] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6530] <... mprotect resumed>) = 0 [pid 6526] <... openat resumed>) = 3 [pid 6530] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6533] rt_sigprocmask(SIG_SETMASK, [], [pid 6532] <... memfd_create resumed>) = 3 [pid 6530] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6529] mkdir("./file1", 0777 [pid 6526] chdir("./file1" [pid 6533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6529] <... mkdir resumed>) = 0 [pid 6526] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6534 attached [pid 6533] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6532] <... mmap resumed>) = 0x7eff79a00000 [pid 6531] <... openat resumed>) = 4 [pid 6529] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6526] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6534] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6530] <... clone3 resumed> => {parent_tid=[6534]}, 88) = 6534 [pid 6526] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6534] <... rseq resumed>) = 0 [ 185.170203][ T6525] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.185651][ T6525] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.202779][ T28] audit: type=1800 audit(1708423262.815:480): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 6530] rt_sigprocmask(SIG_SETMASK, [], [pid 6534] set_robust_list(0x7eff81ecd9a0, 24 [pid 6532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6531] ioctl(4, LOOP_SET_FD, 3 [pid 6526] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6526] <... futex resumed>) = 1 [pid 6526] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6534] <... set_robust_list resumed>) = 0 [pid 6534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6534] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6530] <... futex resumed>) = 1 [pid 6534] memfd_create("syzkaller", 0 [pid 6530] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6534] <... memfd_create resumed>) = 3 [pid 6534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6523] <... futex resumed>) = 0 [pid 6523] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = 0 [pid 6523] <... futex resumed>) = 1 [pid 6526] creat("./file0", 000 [pid 6523] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] <... creat resumed>) = 4 [pid 6526] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6523] <... futex resumed>) = 0 [pid 6526] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6531] <... ioctl resumed>) = 0 [pid 6526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6523] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... write resumed>) = 524288 [pid 6531] close(3 [pid 6526] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6523] <... futex resumed>) = 0 [pid 6529] <... mount resumed>) = 0 [pid 6523] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6531] <... close resumed>) = 0 [pid 6529] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 185.212221][ T6525] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.231539][ T6531] loop0: detected capacity change from 0 to 1024 [pid 6531] close(4 [pid 6529] <... openat resumed>) = 3 [pid 6531] <... close resumed>) = 0 [pid 6531] mkdir("./file1", 0777 [pid 6529] chdir("./file1" [pid 6531] <... mkdir resumed>) = 0 [pid 6529] <... chdir resumed>) = 0 [pid 6532] munmap(0x7eff79a00000, 138412032 [pid 6529] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6525] <... write resumed>) = 53248 [pid 6532] <... munmap resumed>) = 0 [pid 6531] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6525] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6529] <... futex resumed>) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6525] <... futex resumed>) = 0 [pid 6532] <... openat resumed>) = 4 [pid 6524] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] creat("./file0", 000 [pid 6533] <... open resumed>) = 5 [pid 6532] ioctl(4, LOOP_SET_FD, 3 [pid 6524] <... futex resumed>) = 0 [pid 6533] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] <... futex resumed>) = 0 [pid 6529] <... creat resumed>) = 4 [pid 6523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 185.272475][ T6526] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.303310][ T6526] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.312378][ T6532] loop5: detected capacity change from 0 to 1024 [pid 6522] exit_group(0) = ? [pid 6523] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... futex resumed>) = ? [pid 6523] <... futex resumed>) = 0 [pid 6529] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6524] <... futex resumed>) = 0 [pid 6529] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6525] +++ exited with 0 +++ [pid 6529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6524] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] <... mmap resumed>) = 0x7eff81e8c000 [pid 6529] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6524] <... futex resumed>) = 0 [pid 6523] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6524] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6523] <... mprotect resumed>) = 0 [pid 6523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6532] <... ioctl resumed>) = 0 [pid 6534] <... write resumed>) = 524288 [pid 6532] close(3 [pid 6523] <... clone3 resumed> => {parent_tid=[6535]}, 88) = 6535 [pid 6534] munmap(0x7eff79a00000, 138412032) = 0 [pid 6533] +++ exited with 0 +++ [pid 6522] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6522, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5074] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6535 attached [pid 6523] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 185.319338][ T6526] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.339444][ T6529] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.353004][ T6526] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.365722][ T6534] loop4: detected capacity change from 0 to 1024 [pid 6535] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6532] <... close resumed>) = 0 [pid 6523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6535] <... rseq resumed>) = 0 [pid 6532] close(4 [pid 6523] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6535] set_robust_list(0x7eff81eac9a0, 24 [pid 6534] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6532] <... close resumed>) = 0 [pid 6523] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6535] <... set_robust_list resumed>) = 0 [pid 6532] mkdir("./file1", 0777 [pid 6523] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6535] rt_sigprocmask(SIG_SETMASK, [], [pid 6534] <... openat resumed>) = 4 [pid 5074] newfstatat(3, "", [pid 6534] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6532] <... mkdir resumed>) = 0 [pid 6531] <... mount resumed>) = 0 [pid 6524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6524] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6531] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6535] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6532] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5074] unlink("./80/binderfs" [pid 6535] <... open resumed>) = 5 [pid 6535] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... openat resumed>) = 3 [pid 6524] <... futex resumed>) = 0 [pid 5074] <... unlink resumed>) = 0 [ 185.372201][ T6529] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.372628][ T6529] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.372649][ T6529] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.384732][ T6529] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.409039][ T6526] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6535] <... futex resumed>) = 0 [pid 6531] chdir("./file1" [pid 6524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6523] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6524] <... mmap resumed>) = 0x7eff81e8c000 [pid 6531] <... chdir resumed>) = 0 [pid 6524] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6532] <... mount resumed>) = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6535] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6532] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6531] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6524] <... mprotect resumed>) = 0 [pid 6531] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... openat resumed>) = 3 [pid 6531] <... futex resumed>) = 1 [pid 6527] <... futex resumed>) = 0 [pid 6524] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6532] chdir("./file1" [pid 6531] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6527] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6529] <... write resumed>) = 53248 [pid 6527] <... futex resumed>) = 0 [pid 6524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6532] <... chdir resumed>) = 0 [pid 6529] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6536 attached [pid 6532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6531] creat("./file0", 000 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6532] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6531] <... creat resumed>) = 4 [pid 6524] <... clone3 resumed> => {parent_tid=[6536]}, 88) = 6536 [pid 6524] rt_sigprocmask(SIG_SETMASK, [], [pid 6536] <... rseq resumed>) = 0 [pid 6532] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] set_robust_list(0x7eff81eac9a0, 24 [pid 6532] <... futex resumed>) = 1 [pid 6531] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] <... futex resumed>) = 0 [pid 6524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6536] <... set_robust_list resumed>) = 0 [pid 6532] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6531] <... futex resumed>) = 1 [pid 6528] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] <... futex resumed>) = 0 [pid 6536] rt_sigprocmask(SIG_SETMASK, [], [pid 6532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6528] <... futex resumed>) = 0 [pid 6527] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] <... futex resumed>) = 0 [pid 6527] <... futex resumed>) = 0 [pid 6532] creat("./file0", 000 [pid 6527] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6524] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6528] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6536] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 6534] <... ioctl resumed>) = 0 [pid 6532] <... creat resumed>) = 4 [pid 6534] close(3) = 0 [pid 6536] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6534] close(4) = 0 [pid 6534] mkdir("./file1", 0777) = 0 [ 185.413424][ T28] audit: type=1800 audit(1708423263.025:481): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 185.431672][ T6526] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.452972][ T6529] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6534] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6536] <... futex resumed>) = 1 [pid 6534] <... mount resumed>) = 0 [pid 6532] <... futex resumed>) = 1 [pid 6528] <... futex resumed>) = 0 [pid 6526] <... write resumed>) = 53248 [pid 6524] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6536] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6534] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6532] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6528] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] exit_group(0 [pid 6523] exit_group(0 [pid 6536] <... futex resumed>) = ? [pid 6535] <... futex resumed>) = ? [pid 6534] <... openat resumed>) = 3 [pid 6529] <... futex resumed>) = ? [pid 6528] <... futex resumed>) = 0 [pid 6526] <... futex resumed>) = ? [pid 6524] <... exit_group resumed>) = ? [pid 6523] <... exit_group resumed>) = ? [pid 5074] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6536] +++ exited with 0 +++ [pid 6535] +++ exited with 0 +++ [pid 6534] chdir("./file1" [pid 6529] +++ exited with 0 +++ [pid 6528] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6524] +++ exited with 0 +++ [pid 6534] <... chdir resumed>) = 0 [pid 6527] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6527] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./80/file1", [pid 6534] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6524, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5074] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6527] <... mmap resumed>) = 0x7eff81e8c000 [pid 6526] +++ exited with 0 +++ [pid 6523] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6527] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6523, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5072] <... restart_syscall resumed>) = 0 [pid 6527] <... mprotect resumed>) = 0 [pid 6527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 185.518598][ T28] audit: type=1800 audit(1708423263.095:482): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 185.530975][ T6531] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.549626][ T6532] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.559662][ T6531] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6534] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5072] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6534] <... futex resumed>) = 1 [pid 6530] <... futex resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6534] creat("./file0", 000 [pid 6530] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] <... clone3 resumed> => {parent_tid=[6537]}, 88) = 6537 [pid 5072] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6534] <... creat resumed>) = 4 [pid 6530] <... futex resumed>) = 0 [pid 6527] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6537 attached [pid 6534] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6530] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 6537] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6534] <... futex resumed>) = 0 [pid 6530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6527] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 4 [pid 5073] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6537] <... rseq resumed>) = 0 [pid 6534] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6530] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6527] <... futex resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] getdents64(3, [pid 6537] set_robust_list(0x7eff81eac9a0, 24 [pid 6534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6530] <... futex resumed>) = 0 [pid 6528] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6527] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] newfstatat(3, "", [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6537] <... set_robust_list resumed>) = 0 [pid 6534] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6530] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6528] <... futex resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6537] rt_sigprocmask(SIG_SETMASK, [], [pid 6528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6528] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] newfstatat(AT_FDCWD, "./79/binderfs", [pid 6528] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6528] <... mprotect resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 185.569074][ T6531] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.577370][ T6531] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.591347][ T6531] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.599498][ T6531] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.603276][ T6532] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] unlink("./79/binderfs" [pid 6537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6528] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5072] <... unlink resumed>) = 0 [pid 6537] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6528] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] getdents64(4, [pid 5073] unlink("./79/binderfs" [pid 5072] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... unlink resumed>) = 0 [pid 6528] <... clone3 resumed> => {parent_tid=[6538]}, 88) = 6538 [pid 5073] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] getdents64(4, [pid 6528] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6528] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6527] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6530] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6530] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 185.613217][ T6534] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.621896][ T6534] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.631459][ T6534] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.639684][ T28] audit: type=1800 audit(1708423263.235:483): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 6530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 6530] <... clone3 resumed> => {parent_tid=[6539]}, 88) = 6539 [pid 6530] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... close resumed>) = 0 ./strace-static-x86_64: Process 6538 attached [pid 6530] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] rmdir("./80/file1" [pid 6530] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6530] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6537] <... open resumed>) = 5 [pid 5074] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6539 attached [pid 6538] <... rseq resumed>) = 0 [pid 6537] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... write resumed>) = 53248 [pid 5074] getdents64(3, [pid 6539] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6537] <... futex resumed>) = 0 [pid 6539] <... rseq resumed>) = 0 [pid 6537] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6539] set_robust_list(0x7eff81eac9a0, 24 [pid 6528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6539] <... set_robust_list resumed>) = 0 [pid 6539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6539] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6538] set_robust_list(0x7eff81eac9a0, 24 [pid 6531] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6527] exit_group(0 [pid 6538] <... set_robust_list resumed>) = 0 [pid 6537] <... futex resumed>) = ? [pid 6531] <... futex resumed>) = ? [pid 6527] <... exit_group resumed>) = ? [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = 0 [pid 6537] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = 0 [ 185.664697][ T6534] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.666658][ T6532] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.676923][ T6534] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.687301][ T6534] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6538] rt_sigprocmask(SIG_SETMASK, [], [pid 6534] <... write resumed>) = 53248 [pid 6530] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6531] +++ exited with 0 +++ [pid 6527] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6534] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] rmdir("./80" [pid 6538] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6534] <... futex resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6539] <... open resumed>) = 5 [pid 5072] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6527, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6539] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6539] <... futex resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./79/file1", [pid 5072] newfstatat(AT_FDCWD, "./79/file1", [pid 6539] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6534] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 6530] exit_group(0 [pid 5074] mkdir("./81", 0777 [pid 5073] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6539] <... futex resumed>) = ? [pid 6530] <... exit_group resumed>) = ? [pid 5072] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... openat resumed>) = 3 [pid 6539] +++ exited with 0 +++ [pid 6534] <... futex resumed>) = ? [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5071] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(4, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5072] getdents64(4, [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 5071] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6538] <... open resumed>) = 5 [pid 6534] +++ exited with 0 +++ [pid 6530] +++ exited with 0 +++ [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] newfstatat(4, "", [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6538] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6530, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./79/file1" [pid 6538] <... futex resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5072] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./79") = 0 [pid 5072] mkdir("./80", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, [pid 6538] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", [pid 5073] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] close(4 [pid 5071] unlink("./81/binderfs" [pid 5075] getdents64(3, [pid 5073] <... close resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] rmdir("./79/file1" [pid 5075] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] getdents64(3, [pid 5075] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] close(3 [pid 5075] unlink("./79/binderfs" [pid 5073] <... close resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] rmdir("./79" [pid 5075] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5073] mkdir("./80", 0777 [pid 5071] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6540 [pid 6532] <... write resumed>) = 53248 [pid 6532] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6532] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6540 attached [pid 6528] exit_group(0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6538] <... futex resumed>) = ? [pid 6532] <... futex resumed>) = ? [pid 6528] <... exit_group resumed>) = ? [pid 6538] +++ exited with 0 +++ [pid 6532] +++ exited with 0 +++ [ 185.700538][ T28] audit: type=1800 audit(1708423263.315:484): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 185.713782][ T6532] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.752013][ T6532] hfsplus: request for non-existent node 16777216 in B*Tree [ 185.761894][ T6532] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6540] set_robust_list(0x5555571ca6a0, 24 [pid 6528] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6528, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6540] <... set_robust_list resumed>) = 0 [pid 6540] chdir("./81" [pid 5076] <... restart_syscall resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6540] <... chdir resumed>) = 0 [pid 5076] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5076] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6540] <... prctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5071] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", [pid 6540] setpgid(0, 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 6540] <... setpgid resumed>) = 0 [pid 5075] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./81/file1", [pid 6540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6540] <... openat resumed>) = 3 [pid 5076] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(AT_FDCWD, "./79/file1", [pid 5073] <... ioctl resumed>) = 0 [pid 5071] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 6540] write(3, "1000", 4 [pid 5076] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] <... write resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6540] close(3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 4 [pid 6540] <... close resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(4, "", [pid 5076] unlink("./80/binderfs"./strace-static-x86_64: Process 6541 attached [pid 6540] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6541] set_robust_list(0x5555571ca6a0, 24 [pid 6540] <... symlink resumed>) = 0 [pid 5076] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] newfstatat(4, "", [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6541 [pid 5071] getdents64(4, [pid 5073] close(3 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6540] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] getdents64(4, [pid 6541] <... set_robust_list resumed>) = 0 [pid 6540] <... futex resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6540] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6540] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] close(4 [pid 6540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] getdents64(4, [pid 5071] <... close resumed>) = 0 ./strace-static-x86_64: Process 6542 attached [pid 6541] chdir("./80" [pid 6540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./81/file1" [pid 6542] set_robust_list(0x5555571ca6a0, 24 [pid 6541] <... chdir resumed>) = 0 [pid 6540] <... mmap resumed>) = 0x7eff81ead000 [pid 5075] close(4 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6542 [pid 6542] <... set_robust_list resumed>) = 0 [pid 6541] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6540] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6541] <... prctl resumed>) = 0 [pid 6542] chdir("./80" [pid 6540] <... mprotect resumed>) = 0 [pid 5076] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] rmdir("./79/file1" [pid 6542] <... chdir resumed>) = 0 [pid 6541] setpgid(0, 0 [pid 6540] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 6542] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6541] <... setpgid resumed>) = 0 [pid 6540] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] newfstatat(AT_FDCWD, "./80/file1", [pid 5075] getdents64(3, [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6542] <... prctl resumed>) = 0 [pid 6541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3./strace-static-x86_64: Process 6543 attached [pid 6541] <... openat resumed>) = 3 [pid 5076] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5071] <... close resumed>) = 0 [pid 6543] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6542] setpgid(0, 0 [pid 6541] write(3, "1000", 4 [pid 6540] <... clone3 resumed> => {parent_tid=[6543]}, 88) = 6543 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5071] rmdir("./81" [pid 6543] <... rseq resumed>) = 0 [pid 6542] <... setpgid resumed>) = 0 [pid 6541] <... write resumed>) = 4 [pid 6540] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./79" [pid 6543] set_robust_list(0x7eff81ecd9a0, 24 [pid 6542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6541] close(3 [pid 6540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6543] <... set_robust_list resumed>) = 0 [pid 6542] <... openat resumed>) = 3 [pid 6541] <... close resumed>) = 0 [pid 6540] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6541] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(4, "", [pid 6543] rt_sigprocmask(SIG_SETMASK, [], [pid 6541] <... symlink resumed>) = 0 [pid 6540] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] mkdir("./80", 0777 [pid 6543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6542] write(3, "1000", 4 [pid 6541] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 5075] <... mkdir resumed>) = 0 [pid 5071] mkdir("./82", 0777 [pid 6543] memfd_create("syzkaller", 0 [pid 6542] <... write resumed>) = 4 [pid 6541] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6542] close(3 [pid 6541] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] getdents64(4, [pid 5071] <... mkdir resumed>) = 0 [pid 6543] <... memfd_create resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... openat resumed>) = 3 [pid 6543] <... mmap resumed>) = 0x7eff79a00000 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] close(4 [pid 6543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6541] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6542] <... close resumed>) = 0 [pid 6541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] rmdir("./80/file1" [pid 6541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... rmdir resumed>) = 0 [pid 6541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6542] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6541] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] getdents64(3, [pid 6542] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6541] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6542] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6542] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6541] <... mprotect resumed>) = 0 [pid 5076] close(3 [pid 6542] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6541] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... close resumed>) = 0 [pid 6543] <... write resumed>) = 524288 [pid 6542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6541] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] rmdir("./80" [pid 6543] munmap(0x7eff79a00000, 138412032 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6542] <... mmap resumed>) = 0x7eff81ead000 ./strace-static-x86_64: Process 6544 attached [pid 6542] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... rmdir resumed>) = 0 [pid 6544] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6543] <... munmap resumed>) = 0 [pid 6542] <... mprotect resumed>) = 0 [pid 6541] <... clone3 resumed> => {parent_tid=[6544]}, 88) = 6544 [pid 5076] mkdir("./81", 0777 [pid 6544] set_robust_list(0x7eff81ecd9a0, 24 [pid 6543] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6542] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6541] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... mkdir resumed>) = 0 [pid 6541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6544] <... set_robust_list resumed>) = 0 [pid 6543] <... openat resumed>) = 4 [pid 6542] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6541] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... openat resumed>) = 3 [pid 5071] <... ioctl resumed>) = 0 [pid 6544] rt_sigprocmask(SIG_SETMASK, [], [pid 6543] ioctl(4, LOOP_SET_FD, 3 [pid 6542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6541] <... futex resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6541] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6545 attached [pid 6545] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6545] set_robust_list(0x7eff81ecd9a0, 24 [pid 6542] <... clone3 resumed> => {parent_tid=[6545]}, 88) = 6545 [pid 6545] <... set_robust_list resumed>) = 0 [pid 6542] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] rt_sigprocmask(SIG_SETMASK, [], [pid 6542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6542] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] memfd_create("syzkaller", 0 [pid 6542] <... futex resumed>) = 0 [pid 6542] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6545] <... memfd_create resumed>) = 3 [pid 6545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 6544] memfd_create("syzkaller", 0 [pid 6543] <... ioctl resumed>) = 0 [pid 6544] <... memfd_create resumed>) = 3 [pid 6544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6543] close(3) = 0 [pid 6543] close(4 [pid 6544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6543] <... close resumed>) = 0 [pid 6545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6543] mkdir("./file1", 0777) = 0 [pid 5071] close(3 [pid 6544] <... write resumed>) = 524288 [pid 5071] <... close resumed>) = 0 [pid 6543] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6546 [ 185.962193][ T6543] loop3: detected capacity change from 0 to 1024 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6547 ./strace-static-x86_64: Process 6546 attached [pid 6546] set_robust_list(0x5555571ca6a0, 24 [pid 5076] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6547 attached [pid 6546] <... set_robust_list resumed>) = 0 [pid 6545] <... write resumed>) = 524288 [pid 6544] munmap(0x7eff79a00000, 138412032 [pid 6547] set_robust_list(0x5555571ca6a0, 24 [pid 6545] munmap(0x7eff79a00000, 138412032 [pid 6547] <... set_robust_list resumed>) = 0 [pid 6546] chdir("./82" [pid 6545] <... munmap resumed>) = 0 [pid 6544] <... munmap resumed>) = 0 [pid 6547] chdir("./80" [pid 6546] <... chdir resumed>) = 0 [pid 6544] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6547] <... chdir resumed>) = 0 [pid 6546] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6545] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6543] <... mount resumed>) = 0 [pid 6547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6546] <... prctl resumed>) = 0 [pid 6545] <... openat resumed>) = 4 [pid 6544] <... openat resumed>) = 4 [pid 6543] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6547] <... prctl resumed>) = 0 [pid 6546] setpgid(0, 0 [pid 6545] ioctl(4, LOOP_SET_FD, 3 [pid 6544] ioctl(4, LOOP_SET_FD, 3 [pid 6543] <... openat resumed>) = 3 [pid 6547] setpgid(0, 0 [pid 6546] <... setpgid resumed>) = 0 [pid 5076] close(3 [pid 6547] <... setpgid resumed>) = 0 [pid 6547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6543] chdir("./file1" [pid 6547] <... openat resumed>) = 3 [pid 6543] <... chdir resumed>) = 0 [pid 6547] write(3, "1000", 4 [pid 6543] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6547] <... write resumed>) = 4 [pid 6543] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6547] close(3 [pid 6543] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... close resumed>) = 0 [pid 6543] <... futex resumed>) = 1 [pid 6540] <... futex resumed>) = 0 [pid 6547] symlink("/dev/binderfs", "./binderfs" [pid 6543] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6547] <... symlink resumed>) = 0 [pid 6547] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6543] <... futex resumed>) = 0 [pid 6540] <... futex resumed>) = 1 [pid 6547] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6543] creat("./file0", 000 [pid 6547] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6544] <... ioctl resumed>) = 0 [pid 6543] <... creat resumed>) = 4 [pid 6547] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6540] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 6547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6543] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6543] <... futex resumed>) = 1 [pid 6540] <... futex resumed>) = 0 [pid 6547] <... mmap resumed>) = 0x7eff81ead000 [pid 6546] <... openat resumed>) = 3 [pid 6543] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6540] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6547] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6545] <... ioctl resumed>) = 0 [pid 6543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6540] <... futex resumed>) = 0 [pid 6547] <... mprotect resumed>) = 0 [pid 6545] close(3 [pid 6543] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6540] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6548 attached [pid 6547] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6546] write(3, "1000", 4) = 4 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6548 [pid 6546] close(3 [pid 6548] set_robust_list(0x5555571ca6a0, 24 [pid 6547] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6546] <... close resumed>) = 0 [pid 6545] <... close resumed>) = 0 [pid 6548] <... set_robust_list resumed>) = 0 [pid 6547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6546] symlink("/dev/binderfs", "./binderfs" [pid 6545] close(4 [pid 6548] chdir("./81" [pid 6546] <... symlink resumed>) = 0 [pid 6545] <... close resumed>) = 0 ./strace-static-x86_64: Process 6549 attached [pid 6548] <... chdir resumed>) = 0 [pid 6547] <... clone3 resumed> => {parent_tid=[6549]}, 88) = 6549 [pid 6546] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] mkdir("./file1", 0777 [pid 6544] close(3 [pid 6549] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6547] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] <... mkdir resumed>) = 0 [pid 6549] <... rseq resumed>) = 0 [pid 6548] <... prctl resumed>) = 0 [pid 6547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6549] set_robust_list(0x7eff81ecd9a0, 24 [pid 6548] setpgid(0, 0 [pid 6547] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6544] <... close resumed>) = 0 [pid 6546] <... futex resumed>) = 0 [pid 6549] <... set_robust_list resumed>) = 0 [pid 6548] <... setpgid resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 6546] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6544] close(4 [pid 6549] rt_sigprocmask(SIG_SETMASK, [], [pid 6548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6547] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6546] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6548] <... openat resumed>) = 3 [pid 6546] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6544] <... close resumed>) = 0 [pid 6549] memfd_create("syzkaller", 0 [pid 6546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] mkdir("./file1", 0777 [pid 6549] <... memfd_create resumed>) = 3 [pid 6546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6548] write(3, "1000", 4 [pid 6545] <... mount resumed>) = 0 [pid 6544] <... mkdir resumed>) = 0 [pid 6549] <... mmap resumed>) = 0x7eff79a00000 [ 186.045568][ T6545] loop2: detected capacity change from 0 to 1024 [ 186.053110][ T6544] loop1: detected capacity change from 0 to 1024 [ 186.070889][ T6543] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6548] <... write resumed>) = 4 [pid 6546] <... mmap resumed>) = 0x7eff81ead000 [pid 6545] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6548] close(3 [pid 6546] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6545] <... openat resumed>) = 3 [pid 6544] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6548] <... close resumed>) = 0 [pid 6548] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6540] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6540] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... mprotect resumed>) = 0 [pid 6540] <... futex resumed>) = 0 [pid 6540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6545] chdir("./file1" [pid 6540] <... mmap resumed>) = 0x7eff81e8c000 [pid 6546] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6548] <... futex resumed>) = 0 [pid 6545] <... chdir resumed>) = 0 [pid 6540] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6548] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6545] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6540] <... mprotect resumed>) = 0 [pid 6548] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6545] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6540] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6548] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6545] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6549] <... write resumed>) = 524288 [pid 6548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] <... futex resumed>) = 1 [pid 6542] <... futex resumed>) = 0 [pid 6540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6550 attached [pid 6542] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... clone3 resumed> => {parent_tid=[6550]}, 88) = 6550 [ 186.114355][ T6543] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.151993][ T6543] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6542] <... futex resumed>) = 0 [pid 6540] <... clone3 resumed> => {parent_tid=[6551]}, 88) = 6551 ./strace-static-x86_64: Process 6551 attached [pid 6550] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6548] <... mmap resumed>) = 0x7eff81ead000 [pid 6546] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] creat("./file0", 000 [pid 6544] <... mount resumed>) = 0 [pid 6549] munmap(0x7eff79a00000, 138412032 [pid 6550] <... rseq resumed>) = 0 [pid 6549] <... munmap resumed>) = 0 [pid 6546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6550] set_robust_list(0x7eff81ecd9a0, 24 [pid 6544] <... openat resumed>) = 3 [pid 6550] <... set_robust_list resumed>) = 0 [pid 6546] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] chdir("./file1" [pid 6550] rt_sigprocmask(SIG_SETMASK, [], [pid 6546] <... futex resumed>) = 0 [pid 6550] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6546] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6545] <... creat resumed>) = 4 [pid 6544] <... chdir resumed>) = 0 [pid 6544] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6551] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6550] memfd_create("syzkaller", 0 [pid 6549] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6548] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6545] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] rt_sigprocmask(SIG_SETMASK, [], [pid 6550] <... memfd_create resumed>) = 3 [pid 6549] <... openat resumed>) = 4 [pid 6545] <... futex resumed>) = 0 [pid 6544] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6545] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6544] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] <... rseq resumed>) = 0 [pid 6550] <... mmap resumed>) = 0x7eff79a00000 [pid 6549] ioctl(4, LOOP_SET_FD, 3 [pid 6548] <... mprotect resumed>) = 0 [pid 6544] <... futex resumed>) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6541] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6551] set_robust_list(0x7eff81eac9a0, 24 [pid 6548] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6544] creat("./file0", 000 [pid 6542] <... futex resumed>) = 0 [pid 6541] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] <... futex resumed>) = 0 [pid 6551] <... set_robust_list resumed>) = 0 [pid 6550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6548] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6542] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6551] rt_sigprocmask(SIG_SETMASK, [], [pid 6548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6544] <... creat resumed>) = 4 [pid 6551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6552 attached [pid 6551] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6548] <... clone3 resumed> => {parent_tid=[6552]}, 88) = 6552 [pid 6544] <... futex resumed>) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6552] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6550] <... write resumed>) = 524288 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], [pid 6544] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] <... rseq resumed>) = 0 [pid 6549] <... ioctl resumed>) = 0 [pid 6548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6549] close(3 [pid 6548] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... close resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 6544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6541] <... futex resumed>) = 0 [pid 6549] close(4 [pid 6548] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6544] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6541] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6552] set_robust_list(0x7eff81ecd9a0, 24 [pid 6549] <... close resumed>) = 0 [pid 6552] <... set_robust_list resumed>) = 0 [pid 6549] mkdir("./file1", 0777 [pid 6552] rt_sigprocmask(SIG_SETMASK, [], [pid 6549] <... mkdir resumed>) = 0 [pid 6552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] memfd_create("syzkaller", 0 [pid 6549] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6552] <... memfd_create resumed>) = 3 [pid 6552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6551] <... open resumed>) = 5 [pid 6551] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] munmap(0x7eff79a00000, 138412032 [pid 6551] <... futex resumed>) = 1 [pid 6540] <... futex resumed>) = 0 [ 186.159414][ T6543] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.179461][ T6549] loop4: detected capacity change from 0 to 1024 [ 186.196673][ T6545] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6551] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6550] <... munmap resumed>) = 0 [pid 6542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6552] <... write resumed>) = 524288 [pid 6542] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] munmap(0x7eff79a00000, 138412032 [pid 6542] <... futex resumed>) = 0 [pid 6549] <... mount resumed>) = 0 [pid 6541] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6541] <... futex resumed>) = 0 [pid 6549] <... openat resumed>) = 3 [pid 6541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6550] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6549] chdir("./file1" [pid 6541] <... mmap resumed>) = 0x7eff81e8c000 [pid 6550] <... openat resumed>) = 4 [pid 6549] <... chdir resumed>) = 0 [pid 6542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 186.229440][ T6544] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.232219][ T6543] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.244266][ T6545] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.251968][ T6545] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.263612][ T6544] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.272552][ T6544] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6541] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6550] ioctl(4, LOOP_SET_FD, 3 [pid 6549] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6541] <... mprotect resumed>) = 0 [pid 6549] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6541] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6549] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6541] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6549] <... futex resumed>) = 1 [pid 6541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6553 attached [pid 6552] <... munmap resumed>) = 0 [pid 6549] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6547] <... futex resumed>) = 0 [pid 6542] <... mmap resumed>) = 0x7eff81e8c000 [pid 6553] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6552] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6547] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6553] <... rseq resumed>) = 0 [pid 6547] <... futex resumed>) = 0 [pid 6553] set_robust_list(0x7eff81eac9a0, 24 [pid 6552] <... openat resumed>) = 4 [pid 6549] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6547] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] <... mprotect resumed>) = 0 [pid 6541] <... clone3 resumed> => {parent_tid=[6553]}, 88) = 6553 [pid 6549] creat("./file0", 000 [pid 6541] rt_sigprocmask(SIG_SETMASK, [], [pid 6549] <... creat resumed>) = 4 [pid 6541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6553] <... set_robust_list resumed>) = 0 [pid 6552] ioctl(4, LOOP_SET_FD, 3 [pid 6549] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6541] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = 1 [pid 6541] <... futex resumed>) = 0 [pid 6549] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6547] <... futex resumed>) = 0 [pid 6542] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6541] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6553] rt_sigprocmask(SIG_SETMASK, [], [pid 6547] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 186.277434][ T6550] loop0: detected capacity change from 0 to 1024 [ 186.280018][ T6544] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.300695][ T6544] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.308451][ T6544] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.312743][ T6543] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.316439][ T6552] loop5: detected capacity change from 0 to 1024 [pid 6542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6549] <... futex resumed>) = 0 [pid 6547] <... futex resumed>) = 1 [pid 6549] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 6554 attached [pid 6553] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6550] <... ioctl resumed>) = 0 [pid 6547] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] <... clone3 resumed> => {parent_tid=[6554]}, 88) = 6554 [pid 6554] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6550] close(3 [pid 6542] rt_sigprocmask(SIG_SETMASK, [], [pid 6554] <... rseq resumed>) = 0 [pid 6542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6554] set_robust_list(0x7eff81eac9a0, 24 [pid 6552] <... ioctl resumed>) = 0 [pid 6550] <... close resumed>) = 0 [pid 6542] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... set_robust_list resumed>) = 0 [pid 6550] close(4 [pid 6542] <... futex resumed>) = 0 [pid 6552] close(3 [pid 6554] rt_sigprocmask(SIG_SETMASK, [], [pid 6552] <... close resumed>) = 0 [pid 6550] <... close resumed>) = 0 [pid 6542] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] close(4 [pid 6550] mkdir("./file1", 0777 [pid 6554] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6552] <... close resumed>) = 0 [pid 6550] <... mkdir resumed>) = 0 [pid 6550] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6552] mkdir("./file1", 0777 [pid 6541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6552] <... mkdir resumed>) = 0 [ 186.333731][ T6545] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.341468][ T6549] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.353948][ T6545] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6552] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6547] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6547] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] <... write resumed>) = 53248 [pid 6547] <... futex resumed>) = 0 [pid 6547] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6543] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6543] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6553] <... open resumed>) = 5 [pid 6550] <... mount resumed>) = 0 [pid 6547] <... mmap resumed>) = 0x7eff81e8c000 [pid 6553] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6547] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6542] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6544] <... write resumed>) = 53248 [pid 6540] exit_group(0 [pid 6553] <... futex resumed>) = 0 [pid 6551] <... futex resumed>) = ? [pid 6550] <... openat resumed>) = 3 [pid 6547] <... mprotect resumed>) = 0 [pid 6544] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6543] <... futex resumed>) = ? [pid 6540] <... exit_group resumed>) = ? [pid 6553] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6552] <... mount resumed>) = 0 [pid 6551] +++ exited with 0 +++ [pid 6550] chdir("./file1" [ 186.387782][ T6545] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.406140][ T6549] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.425993][ T6549] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6547] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6544] <... futex resumed>) = 0 [pid 6543] +++ exited with 0 +++ [pid 6541] exit_group(0 [pid 6553] <... futex resumed>) = ? [pid 6552] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6550] <... chdir resumed>) = 0 [pid 6541] <... exit_group resumed>) = ? [pid 6540] +++ exited with 0 +++ [pid 6553] +++ exited with 0 +++ [pid 6552] <... openat resumed>) = 3 [pid 6550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6540, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6552] chdir("./file1" [pid 6550] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... write resumed>) = 53248 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6552] <... chdir resumed>) = 0 [pid 6550] <... futex resumed>) = 1 [pid 6546] <... futex resumed>) = 0 [pid 6545] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] +++ exited with 0 +++ [pid 6541] +++ exited with 0 +++ [pid 5074] <... restart_syscall resumed>) = 0 [pid 6552] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6550] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6547] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6546] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] <... futex resumed>) = 0 [pid 6550] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6546] <... futex resumed>) = 0 [pid 6545] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6550] creat("./file0", 000 [pid 6546] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6550] <... creat resumed>) = 4 [pid 6550] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6550] <... futex resumed>) = 1 [pid 6546] <... futex resumed>) = 0 [pid 6552] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6547] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6552] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6550] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6546] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6541, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 6555 attached [pid 6554] <... open resumed>) = 5 [pid 6552] <... futex resumed>) = 1 [pid 6548] <... futex resumed>) = 0 [pid 6546] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6554] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6548] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... clone3 resumed> => {parent_tid=[6555]}, 88) = 6555 [pid 6546] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] exit_group(0 [pid 5074] newfstatat(3, "", [pid 5072] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6555] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6554] <... futex resumed>) = 0 [pid 6552] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6548] <... futex resumed>) = 0 [pid 6547] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [ 186.438341][ T6549] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.459143][ T6549] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6555] <... rseq resumed>) = 0 [pid 6552] creat("./file0", 000 [pid 6548] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] <... futex resumed>) = ? [pid 6542] <... exit_group resumed>) = ? [pid 5074] unlink("./81/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6555] set_robust_list(0x7eff81eac9a0, 24 [pid 6554] +++ exited with 0 +++ [pid 6545] +++ exited with 0 +++ [pid 6555] <... set_robust_list resumed>) = 0 [pid 6552] <... creat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6555] rt_sigprocmask(SIG_SETMASK, [], [pid 6547] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... unlink resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 6555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6552] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6547] <... futex resumed>) = 0 [pid 6542] +++ exited with 0 +++ [pid 5074] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(3, "", [pid 6555] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6552] <... futex resumed>) = 1 [pid 6549] <... write resumed>) = 53248 [pid 6548] <... futex resumed>) = 0 [pid 6547] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6555] <... open resumed>) = 5 [pid 6552] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6549] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6542, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6555] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] <... futex resumed>) = 0 [pid 6548] <... futex resumed>) = 0 [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5072] getdents64(3, [pid 6555] <... futex resumed>) = 1 [pid 6549] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6548] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6547] <... futex resumed>) = 0 [pid 5073] <... restart_syscall resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6555] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6547] exit_group(0 [pid 5072] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6555] <... futex resumed>) = ? [pid 6549] <... futex resumed>) = ? [pid 6547] <... exit_group resumed>) = ? [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6555] +++ exited with 0 +++ [pid 6549] +++ exited with 0 +++ [pid 6547] +++ exited with 0 +++ [pid 6546] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6546] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6547, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6546] <... futex resumed>) = 0 [ 186.482196][ T6549] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.505595][ T6550] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] unlink("./80/binderfs" [pid 6546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 3 [pid 5072] <... unlink resumed>) = 0 [pid 5073] newfstatat(3, "", [pid 5072] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 186.530805][ T6550] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.538163][ T6552] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.538186][ T6552] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.538602][ T6552] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.538622][ T6552] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.542774][ T6552] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6546] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] newfstatat(AT_FDCWD, "./81/file1", [pid 6548] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6548] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6548] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6556]}, 88) = 6556 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6548] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6548] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6546] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] getdents64(3, [pid 6546] <... mprotect resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] newfstatat(4, "", [pid 6546] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6546] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6557 attached ./strace-static-x86_64: Process 6556 attached [pid 6552] <... write resumed>) = 53248 [pid 6546] <... clone3 resumed> => {parent_tid=[6557]}, 88) = 6557 [pid 5075] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5074] getdents64(4, [pid 5073] unlink("./80/binderfs" [pid 5072] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6556] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6552] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6556] <... rseq resumed>) = 0 [pid 6552] <... futex resumed>) = 0 [pid 6546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] unlink("./80/binderfs" [pid 5074] close(4 [pid 6557] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6556] set_robust_list(0x7eff81eac9a0, 24 [pid 6552] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6546] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... unlink resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./80/file1", [pid 6557] <... rseq resumed>) = 0 [pid 6556] <... set_robust_list resumed>) = 0 [pid 6550] <... write resumed>) = 53248 [pid 6546] <... futex resumed>) = 0 [pid 5075] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./81/file1" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6557] set_robust_list(0x7eff81eac9a0, 24 [pid 6556] rt_sigprocmask(SIG_SETMASK, [], [pid 6550] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... rmdir resumed>) = 0 [pid 5072] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] <... set_robust_list resumed>) = 0 [pid 6556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6550] <... futex resumed>) = 0 [pid 6557] rt_sigprocmask(SIG_SETMASK, [], [pid 6556] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6550] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6556] <... open resumed>) = 5 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6557] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5072] <... openat resumed>) = 4 [pid 6557] <... open resumed>) = 5 [pid 6556] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6548] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... umount2 resumed>) = 0 [pid 5074] close(3 [pid 5073] <... umount2 resumed>) = 0 [pid 6557] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] <... futex resumed>) = 0 [pid 6548] exit_group(0 [pid 5074] <... close resumed>) = 0 [pid 5073] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(4, "", [pid 6552] <... futex resumed>) = ? [pid 6557] <... futex resumed>) = 1 [pid 6548] <... exit_group resumed>) = ? [pid 6546] <... futex resumed>) = 0 [pid 5075] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] rmdir("./81" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6557] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6556] +++ exited with 0 +++ [pid 6552] +++ exited with 0 +++ [pid 6546] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... rmdir resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./80/file1", [pid 5072] getdents64(4, [pid 6557] <... futex resumed>) = ? [pid 6550] <... futex resumed>) = ? [pid 6546] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./80/file1", [pid 6557] +++ exited with 0 +++ [pid 6550] +++ exited with 0 +++ [pid 6548] +++ exited with 0 +++ [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] mkdir("./82", 0777 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... mkdir resumed>) = 0 [pid 5073] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6548, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6546] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] <... openat resumed>) = 4 [pid 5072] close(4 [pid 5076] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6546, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5076] <... openat resumed>) = 3 [pid 5075] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5072] <... close resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5075] <... openat resumed>) = 4 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] rmdir("./80/file1" [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5076] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5073] getdents64(4, [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(3, [pid 5071] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 186.561645][ T6550] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.561667][ T6550] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.566447][ T6550] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.594959][ T6552] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.600017][ T6550] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5075] getdents64(4, [pid 5073] close(4 [pid 5072] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... close resumed>) = 0 [pid 5072] rmdir("./80" [pid 5071] <... openat resumed>) = 3 [pid 5076] unlink("./81/binderfs" [pid 5073] rmdir("./80/file1" [pid 5075] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] close(4 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5075] rmdir("./80/file1" [pid 5073] <... rmdir resumed>) = 0 [pid 5076] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./80") = 0 [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] mkdir("./81", 0777 [pid 5073] close(3 [pid 5072] mkdir("./81", 0777 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] rmdir("./80" [pid 5076] newfstatat(AT_FDCWD, "./81/file1", [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] <... rmdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] mkdir("./81", 0777 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... mkdir resumed>) = 0 [pid 5076] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... ioctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] close(3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] unlink("./82/binderfs" [pid 5076] getdents64(4, [pid 5074] <... close resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5071] <... unlink resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4) = 0 [pid 5076] rmdir("./81/file1"./strace-static-x86_64: Process 6558 attached [pid 5073] <... openat resumed>) = 3 [pid 5071] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6558] set_robust_list(0x5555571ca6a0, 24 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6558 [pid 6558] <... set_robust_list resumed>) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6558] chdir("./82" [pid 5076] <... rmdir resumed>) = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./81" [pid 6558] <... chdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6558] setpgid(0, 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5071] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6558] <... setpgid resumed>) = 0 [pid 6558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6558] write(3, "1000", 4) = 4 [pid 6558] close(3) = 0 [pid 6558] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] mkdir("./82", 0777 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6558] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6558] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6558] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./82/file1", [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6558] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6558] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6558] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 6558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 4 [pid 6558] <... clone3 resumed> => {parent_tid=[6559]}, 88) = 6559 [pid 6558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6558] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6558] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6560 attached ./strace-static-x86_64: Process 6559 attached [pid 5072] close(3 [pid 5071] newfstatat(4, "", [pid 6560] set_robust_list(0x5555571ca6a0, 24 [pid 5072] <... close resumed>) = 0 [pid 6559] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6560] <... set_robust_list resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6560 [pid 5071] getdents64(4, [pid 6560] chdir("./81" [pid 6559] <... rseq resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6560] <... chdir resumed>) = 0 [pid 6559] set_robust_list(0x7eff81ecd9a0, 24 [pid 5071] getdents64(4, [pid 6559] <... set_robust_list resumed>) = 0 [pid 6559] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6559] memfd_create("syzkaller", 0) = 3 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] close(4./strace-static-x86_64: Process 6561 attached [pid 6560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6559] <... mmap resumed>) = 0x7eff79a00000 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6561] set_robust_list(0x5555571ca6a0, 24 [pid 6560] <... prctl resumed>) = 0 [pid 5073] close(3 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6561 [pid 5071] rmdir("./82/file1" [pid 6561] <... set_robust_list resumed>) = 0 [pid 6560] setpgid(0, 0 [pid 5073] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... rmdir resumed>) = 0 [pid 6561] chdir("./81" [pid 6560] <... setpgid resumed>) = 0 [pid 6561] <... chdir resumed>) = 0 [pid 6560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5071] getdents64(3, ./strace-static-x86_64: Process 6562 attached [pid 6561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6560] <... openat resumed>) = 3 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6562 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6561] <... prctl resumed>) = 0 [pid 6560] write(3, "1000", 4 [pid 5071] close(3 [pid 6562] set_robust_list(0x5555571ca6a0, 24 [pid 6561] setpgid(0, 0 [pid 5071] <... close resumed>) = 0 [pid 6562] <... set_robust_list resumed>) = 0 [pid 6560] <... write resumed>) = 4 [pid 5071] rmdir("./82" [pid 6562] chdir("./81") = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6561] <... setpgid resumed>) = 0 [pid 6560] close(3 [pid 6559] <... write resumed>) = 524288 [pid 5076] <... ioctl resumed>) = 0 [pid 6562] <... prctl resumed>) = 0 [pid 6560] <... close resumed>) = 0 [pid 6559] munmap(0x7eff79a00000, 138412032 [pid 6562] setpgid(0, 0 [pid 6561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6560] symlink("/dev/binderfs", "./binderfs" [pid 6559] <... munmap resumed>) = 0 [pid 5071] mkdir("./83", 0777 [pid 6562] <... setpgid resumed>) = 0 [pid 6561] <... openat resumed>) = 3 [pid 6560] <... symlink resumed>) = 0 [pid 6559] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] close(3 [pid 6562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6559] <... openat resumed>) = 4 [pid 6562] <... openat resumed>) = 3 [pid 6559] ioctl(4, LOOP_SET_FD, 3 [pid 6562] write(3, "1000", 4 [pid 6561] write(3, "1000", 4 [pid 6560] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6561] <... write resumed>) = 4 [pid 6560] <... futex resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6561] close(3 [pid 6560] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6561] <... close resumed>) = 0 [pid 6561] symlink("/dev/binderfs", "./binderfs" [pid 6560] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6562] <... write resumed>) = 4 [pid 6562] close(3 [pid 6561] <... symlink resumed>) = 0 [pid 6560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6562] <... close resumed>) = 0 [pid 6560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6561] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] <... mmap resumed>) = 0x7eff81ead000 [pid 6560] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6561] <... futex resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6561] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6562] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6561] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6559] <... ioctl resumed>) = 0 [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6562] <... mmap resumed>) = 0x7eff81ead000 [pid 6559] close(3 [pid 6562] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6559] <... close resumed>) = 0 [pid 6559] close(4) = 0 [pid 6559] mkdir("./file1", 0777 [pid 6562] <... mprotect resumed>) = 0 [pid 6561] <... mmap resumed>) = 0x7eff81ead000 [pid 6560] <... mprotect resumed>) = 0 [pid 6559] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6563 attached [pid 6562] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6561] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6562] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6560] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6561] <... mprotect resumed>) = 0 [pid 6561] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6562] <... clone3 resumed> => {parent_tid=[6564]}, 88) = 6564 [pid 6560] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6561] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6563] set_robust_list(0x5555571ca6a0, 24./strace-static-x86_64: Process 6564 attached [pid 6562] rt_sigprocmask(SIG_SETMASK, [], [pid 6559] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6563 ./strace-static-x86_64: Process 6565 attached [pid 6564] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6563] <... set_robust_list resumed>) = 0 [pid 6562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6565] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 6566 attached [pid 6566] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6565] <... rseq resumed>) = 0 [pid 6563] chdir("./82" [pid 6560] <... clone3 resumed> => {parent_tid=[6566]}, 88) = 6566 [pid 6565] set_robust_list(0x7eff81ecd9a0, 24 [pid 6566] <... rseq resumed>) = 0 [pid 6565] <... set_robust_list resumed>) = 0 [pid 6564] <... rseq resumed>) = 0 [pid 6563] <... chdir resumed>) = 0 [pid 6562] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] rt_sigprocmask(SIG_SETMASK, [], [pid 6566] set_robust_list(0x7eff81ecd9a0, 24 [pid 6565] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6563] <... prctl resumed>) = 0 [pid 6560] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6563] setpgid(0, 0 [pid 6560] <... futex resumed>) = 0 [pid 6565] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6566] <... set_robust_list resumed>) = 0 [pid 6564] set_robust_list(0x7eff81ecd9a0, 24 [pid 6563] <... setpgid resumed>) = 0 [pid 6562] <... futex resumed>) = 0 [pid 6560] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6566] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] <... set_robust_list resumed>) = 0 [pid 6562] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6564] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6561] <... clone3 resumed> => {parent_tid=[6565]}, 88) = 6565 [pid 6566] memfd_create("syzkaller", 0 [pid 6564] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6563] <... openat resumed>) = 3 [pid 6561] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] memfd_create("syzkaller", 0 [pid 6563] write(3, "1000", 4 [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6564] <... memfd_create resumed>) = 3 [pid 6566] <... memfd_create resumed>) = 3 [pid 6563] <... write resumed>) = 4 [pid 6561] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6565] <... futex resumed>) = 0 [pid 6564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6563] close(3 [pid 6561] <... futex resumed>) = 1 [pid 6566] <... mmap resumed>) = 0x7eff79a00000 [pid 6565] memfd_create("syzkaller", 0 [pid 6564] <... mmap resumed>) = 0x7eff79a00000 [pid 6563] <... close resumed>) = 0 [pid 6561] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6565] <... memfd_create resumed>) = 3 [pid 6565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 186.849008][ T6559] loop3: detected capacity change from 0 to 1024 [pid 6563] symlink("/dev/binderfs", "./binderfs" [pid 6565] <... mmap resumed>) = 0x7eff79a00000 [pid 6564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6563] <... symlink resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6563] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... mount resumed>) = 0 [pid 6559] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5071] close(3 [pid 6565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6563] <... futex resumed>) = 0 [pid 6559] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6563] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6559] chdir("./file1" [pid 6563] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6559] <... chdir resumed>) = 0 [pid 6563] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6564] <... write resumed>) = 524288 [pid 6563] <... mmap resumed>) = 0x7eff81ead000 [pid 6559] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6567 attached [pid 6563] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6567 [pid 6559] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6559] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6567] set_robust_list(0x5555571ca6a0, 24 [pid 6559] <... futex resumed>) = 1 [pid 6567] <... set_robust_list resumed>) = 0 [pid 6559] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6558] <... futex resumed>) = 0 [pid 6567] chdir("./83" [pid 6559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6558] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] creat("./file0", 000 [pid 6558] <... futex resumed>) = 0 [pid 6559] <... creat resumed>) = 4 [pid 6558] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6559] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6567] <... chdir resumed>) = 0 [pid 6559] <... futex resumed>) = 1 [pid 6558] <... futex resumed>) = 0 [pid 6567] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6559] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6558] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6567] <... prctl resumed>) = 0 [pid 6565] <... write resumed>) = 524288 [pid 6563] <... mprotect resumed>) = 0 [pid 6567] setpgid(0, 0 [pid 6558] <... futex resumed>) = 0 [pid 6567] <... setpgid resumed>) = 0 [pid 6558] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6563] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6567] write(3, "1000", 4) = 4 [pid 6566] <... write resumed>) = 524288 [pid 6565] munmap(0x7eff79a00000, 138412032 [pid 6564] munmap(0x7eff79a00000, 138412032 [pid 6563] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6567] close(3 [pid 6566] munmap(0x7eff79a00000, 138412032 [pid 6565] <... munmap resumed>) = 0 [pid 6564] <... munmap resumed>) = 0 [pid 6563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6567] <... close resumed>) = 0 [pid 6567] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6567] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... munmap resumed>) = 0 [pid 6563] <... clone3 resumed> => {parent_tid=[6568]}, 88) = 6568 ./strace-static-x86_64: Process 6568 attached [pid 6567] <... futex resumed>) = 0 [pid 6564] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6565] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6563] rt_sigprocmask(SIG_SETMASK, [], [pid 6568] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6567] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6566] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6565] <... openat resumed>) = 4 [pid 6564] <... openat resumed>) = 4 [pid 6563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6568] <... rseq resumed>) = 0 [pid 6567] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6563] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] set_robust_list(0x7eff81ecd9a0, 24 [pid 6567] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6566] <... openat resumed>) = 4 [pid 6565] ioctl(4, LOOP_SET_FD, 3 [pid 6564] ioctl(4, LOOP_SET_FD, 3 [pid 6566] ioctl(4, LOOP_SET_FD, 3 [pid 6567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6568] <... set_robust_list resumed>) = 0 [pid 6567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6568] rt_sigprocmask(SIG_SETMASK, [], [pid 6567] <... mmap resumed>) = 0x7eff81ead000 [pid 6568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6567] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6568] memfd_create("syzkaller", 0 [pid 6567] <... mprotect resumed>) = 0 [pid 6567] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6569]}, 88) = 6569 [pid 6567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6567] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6558] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6567] <... futex resumed>) = 0 [pid 6558] <... futex resumed>) = 0 [pid 6567] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6569 attached ) = 0x7eff81e8c000 [pid 6558] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6558] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6569] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6568] <... memfd_create resumed>) = 3 [pid 6558] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6569] <... rseq resumed>) = 0 [pid 6568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6570 attached [pid 6569] set_robust_list(0x7eff81ecd9a0, 24 [pid 6568] <... mmap resumed>) = 0x7eff79a00000 [pid 6563] <... futex resumed>) = 0 [pid 6570] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6569] <... set_robust_list resumed>) = 0 [pid 6570] <... rseq resumed>) = 0 [pid 6569] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6570] set_robust_list(0x7eff81eac9a0, 24 [pid 6569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6558] <... clone3 resumed> => {parent_tid=[6570]}, 88) = 6570 [pid 6570] <... set_robust_list resumed>) = 0 [pid 6569] memfd_create("syzkaller", 0 [pid 6558] rt_sigprocmask(SIG_SETMASK, [], [pid 6570] rt_sigprocmask(SIG_SETMASK, [], [pid 6569] <... memfd_create resumed>) = 3 [pid 6564] <... ioctl resumed>) = 0 [pid 6570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6566] <... ioctl resumed>) = 0 [pid 6564] close(3 [pid 6558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6570] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6569] <... mmap resumed>) = 0x7eff79a00000 [pid 6566] close(3 [pid 6564] <... close resumed>) = 0 [pid 6558] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 186.980080][ T6559] hfsplus: request for non-existent node 16777216 in B*Tree [ 186.983743][ T6564] loop2: detected capacity change from 0 to 1024 [ 186.987948][ T6565] loop1: detected capacity change from 0 to 1024 [ 187.001060][ T6566] loop4: detected capacity change from 0 to 1024 [pid 6566] <... close resumed>) = 0 [pid 6570] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6565] <... ioctl resumed>) = 0 [pid 6558] <... futex resumed>) = 0 [pid 6566] close(4 [pid 6565] close(3 [pid 6564] close(4 [pid 6558] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6566] <... close resumed>) = 0 [pid 6565] <... close resumed>) = 0 [pid 6566] mkdir("./file1", 0777 [pid 6565] close(4 [pid 6564] <... close resumed>) = 0 [pid 6564] mkdir("./file1", 0777 [pid 6566] <... mkdir resumed>) = 0 [pid 6565] <... close resumed>) = 0 [pid 6564] <... mkdir resumed>) = 0 [pid 6566] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6565] mkdir("./file1", 0777 [pid 6569] <... write resumed>) = 524288 [pid 6565] <... mkdir resumed>) = 0 [pid 6564] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6565] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6566] <... mount resumed>) = 0 [pid 6565] <... mount resumed>) = 0 [pid 6568] <... write resumed>) = 524288 [pid 6566] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6565] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6568] munmap(0x7eff79a00000, 138412032 [pid 6566] <... openat resumed>) = 3 [pid 6565] <... openat resumed>) = 3 [ 187.034563][ T6559] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.071313][ T6559] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6568] <... munmap resumed>) = 0 [pid 6566] chdir("./file1" [pid 6565] chdir("./file1" [pid 6566] <... chdir resumed>) = 0 [pid 6565] <... chdir resumed>) = 0 [pid 6566] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6569] munmap(0x7eff79a00000, 138412032 [pid 6566] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6565] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6566] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6560] <... futex resumed>) = 0 [pid 6568] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6566] creat("./file0", 000 [pid 6565] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6564] <... mount resumed>) = 0 [pid 6560] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... openat resumed>) = 4 [pid 6565] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6560] <... futex resumed>) = 0 [pid 6558] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6566] <... creat resumed>) = 4 [pid 6564] <... openat resumed>) = 3 [pid 6560] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6568] ioctl(4, LOOP_SET_FD, 3 [pid 6564] chdir("./file1" [pid 6569] <... munmap resumed>) = 0 [pid 6566] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = 1 [pid 6564] <... chdir resumed>) = 0 [pid 6561] <... futex resumed>) = 0 [pid 6564] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 187.083002][ T6559] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.103503][ T6568] loop5: detected capacity change from 0 to 1024 [ 187.116474][ T6559] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6564] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6565] creat("./file0", 000 [pid 6566] <... futex resumed>) = 1 [pid 6564] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = 0 [pid 6560] <... futex resumed>) = 0 [pid 6564] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... creat resumed>) = 4 [pid 6566] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6562] <... futex resumed>) = 0 [pid 6561] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... openat resumed>) = 4 [pid 6564] creat("./file0", 000 [pid 6562] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6569] ioctl(4, LOOP_SET_FD, 3 [pid 6564] <... creat resumed>) = 4 [pid 6560] <... futex resumed>) = 0 [pid 6564] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... ioctl resumed>) = 0 [pid 6564] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 6568] close(3 [pid 6564] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... close resumed>) = 0 [pid 6564] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6562] <... futex resumed>) = 0 [pid 6568] close(4 [pid 6564] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6562] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6568] <... close resumed>) = 0 [pid 6568] mkdir("./file1", 0777) = 0 [pid 6560] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6565] <... futex resumed>) = 1 [pid 6561] <... futex resumed>) = 0 [pid 6569] <... ioctl resumed>) = 0 [pid 6568] <... mount resumed>) = 0 [pid 6565] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6561] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6568] chdir("./file1") = 0 [pid 6568] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6568] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] <... futex resumed>) = 0 [pid 6563] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6563] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] <... futex resumed>) = 0 [ 187.129452][ T6569] loop0: detected capacity change from 0 to 1024 [ 187.151667][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.154068][ T6566] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.168267][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.168844][ T6559] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6561] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6568] <... futex resumed>) = 1 [pid 6569] close(3 [pid 6562] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6562] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6568] creat("./file0", 000 [pid 6562] <... mmap resumed>) = 0x7eff81e8c000 [pid 6570] <... open resumed>) = 5 [pid 6569] <... close resumed>) = 0 [pid 6568] <... creat resumed>) = 4 [pid 6560] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6570] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6562] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6570] <... futex resumed>) = 0 [pid 6568] <... futex resumed>) = 1 [pid 6563] <... futex resumed>) = 0 [pid 6562] <... mprotect resumed>) = 0 [pid 6570] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6568] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6563] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6562] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6569] close(4 [pid 6563] <... futex resumed>) = 0 [pid 6562] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6560] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 187.176234][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.184764][ T6566] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.196054][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.200437][ T6566] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.220115][ T6565] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.221047][ T6568] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6571 attached [pid 6569] <... close resumed>) = 0 [pid 6562] <... clone3 resumed> => {parent_tid=[6571]}, 88) = 6571 [pid 6561] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6560] <... futex resumed>) = 0 [pid 6571] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6561] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] mkdir("./file1", 0777 [pid 6559] <... write resumed>) = 53248 [pid 6560] <... mmap resumed>) = 0x7eff81e8c000 [pid 6571] <... rseq resumed>) = 0 [pid 6571] set_robust_list(0x7eff81eac9a0, 24 [pid 6569] <... mkdir resumed>) = 0 [pid 6561] <... futex resumed>) = 0 [pid 6560] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6559] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] <... set_robust_list resumed>) = 0 [pid 6562] rt_sigprocmask(SIG_SETMASK, [], [pid 6559] <... futex resumed>) = 0 [pid 6571] rt_sigprocmask(SIG_SETMASK, [], [pid 6562] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6560] <... mprotect resumed>) = 0 [pid 6559] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6558] exit_group(0 [pid 6571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6570] <... futex resumed>) = ? [pid 6562] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6558] <... exit_group resumed>) = ? [pid 6571] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6570] +++ exited with 0 +++ [pid 6562] <... futex resumed>) = 0 [pid 6561] <... mmap resumed>) = 0x7eff81e8c000 [pid 6560] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6559] <... futex resumed>) = ? [pid 6562] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6560] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6561] <... mprotect resumed>) = 0 [pid 6560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6559] +++ exited with 0 +++ [pid 6558] +++ exited with 0 +++ [pid 6561] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6558, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6561] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6560] <... clone3 resumed> => {parent_tid=[6572]}, 88) = 6572 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6560] rt_sigprocmask(SIG_SETMASK, [], [pid 6569] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, ""./strace-static-x86_64: Process 6572 attached [pid 5074] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6572] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6571] <... open resumed>) = 5 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6571] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6571] <... futex resumed>) = 1 [pid 6562] <... futex resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6572] <... rseq resumed>) = 0 [pid 6571] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] newfstatat(3, "", [pid 6572] set_robust_list(0x7eff81eac9a0, 24 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6572] <... set_robust_list resumed>) = 0 [pid 6572] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6560] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] getdents64(3, [pid 6572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6563] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6572] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6563] <... futex resumed>) = 0 [pid 6563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6563] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6563] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6561] <... clone3 resumed> => {parent_tid=[6573]}, 88) = 6573 [pid 6560] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] <... mprotect resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./82/binderfs", ./strace-static-x86_64: Process 6573 attached [pid 6563] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6573] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6563] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] unlink("./82/binderfs" [pid 6573] <... rseq resumed>) = 0 [pid 6563] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... unlink resumed>) = 0 [pid 6573] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6563] <... clone3 resumed> => {parent_tid=[6574]}, 88) = 6574 [pid 5074] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6573] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6574 attached [pid 6573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6574] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6573] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [ 187.227538][ T6565] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.256389][ T6566] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.264766][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.267816][ T6565] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6563] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6574] <... rseq resumed>) = 0 [pid 6572] <... futex resumed>) = 0 [pid 6569] <... mount resumed>) = 0 [pid 6563] <... futex resumed>) = 0 [pid 6561] rt_sigprocmask(SIG_SETMASK, [], [pid 6560] <... futex resumed>) = 1 [pid 6574] set_robust_list(0x7eff81eac9a0, 24 [pid 6572] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6569] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6563] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6560] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6574] <... set_robust_list resumed>) = 0 [pid 6574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6574] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6572] <... open resumed>) = 5 [pid 6569] <... openat resumed>) = 3 [pid 6561] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] <... futex resumed>) = 0 [pid 6569] chdir("./file1" [pid 6561] <... futex resumed>) = 1 [pid 6572] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6572] <... futex resumed>) = 1 [pid 6569] <... chdir resumed>) = 0 [pid 6561] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6560] <... futex resumed>) = 0 [pid 6573] <... open resumed>) = 5 [pid 6572] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [ 187.283176][ T6566] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.296603][ T6566] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.298873][ T6564] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.304805][ T6565] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.313451][ T6568] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6569] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6573] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6566] <... write resumed>) = 53248 [pid 6564] <... write resumed>) = 53248 [pid 6564] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6564] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] exit_group(0 [pid 6571] <... futex resumed>) = ? [pid 6564] <... futex resumed>) = ? [pid 6562] <... exit_group resumed>) = ? [pid 6566] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6564] +++ exited with 0 +++ [pid 6566] <... futex resumed>) = 0 [pid 6571] +++ exited with 0 +++ [pid 6569] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6562] +++ exited with 0 +++ [pid 6569] <... futex resumed>) = 1 [pid 6560] exit_group(0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6562, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 6572] <... futex resumed>) = ? [pid 6567] <... futex resumed>) = 0 [pid 6566] <... futex resumed>) = ? [pid 6560] <... exit_group resumed>) = ? [pid 6572] +++ exited with 0 +++ [pid 6567] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6563] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6573] <... futex resumed>) = 1 [pid 6567] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6573] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6567] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 6569] creat("./file0", 000 [pid 6566] +++ exited with 0 +++ [pid 6560] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(AT_FDCWD, "./82/file1", [ 187.337452][ T6565] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.346972][ T6565] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.379663][ T6568] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.403025][ T6569] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.414320][ T6569] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.415641][ T6568] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6574] <... open resumed>) = 5 [pid 6569] <... creat resumed>) = 4 [pid 6565] <... write resumed>) = 53248 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6560, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6569] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6569] <... futex resumed>) = 1 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6569] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6567] <... futex resumed>) = 0 [pid 6565] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6574] <... futex resumed>) = 0 [pid 6567] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6565] <... futex resumed>) = 0 [pid 6561] exit_group(0 [pid 6574] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6573] <... futex resumed>) = ? [pid 6567] <... futex resumed>) = 1 [pid 6569] <... futex resumed>) = 0 [pid 6561] <... exit_group resumed>) = ? [pid 5075] <... openat resumed>) = 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6573] +++ exited with 0 +++ [pid 6569] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6567] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] newfstatat(3, "", [pid 5074] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(4, "", [pid 5073] unlink("./81/binderfs" [pid 5075] getdents64(3, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, [pid 5075] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./82/file1") = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./81/binderfs" [pid 5073] <... umount2 resumed>) = 0 [pid 6565] +++ exited with 0 +++ [pid 6561] +++ exited with 0 +++ [pid 5075] <... unlink resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6561, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5072] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", [pid 5074] rmdir("./82" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5072] getdents64(3, [pid 5073] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] mkdir("./83", 0777 [pid 5073] newfstatat(AT_FDCWD, "./81/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5073] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] unlink("./81/binderfs" [pid 5073] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... unlink resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6567] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] newfstatat(4, "", [pid 6567] <... futex resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6567] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] getdents64(4, [pid 6567] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./81/file1" [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 6567] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6567] <... mprotect resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./81") = 0 [pid 6567] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] mkdir("./82", 0777) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6567] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6567] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6575 attached => {parent_tid=[6575]}, 88) = 6575 [pid 6575] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6567] rt_sigprocmask(SIG_SETMASK, [], [pid 6575] <... rseq resumed>) = 0 [pid 6567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] set_robust_list(0x7eff81eac9a0, 24 [pid 6567] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6575] <... set_robust_list resumed>) = 0 [pid 6567] <... futex resumed>) = 0 [pid 6575] rt_sigprocmask(SIG_SETMASK, [], [pid 6567] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5075] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./81/file1", [pid 5072] <... umount2 resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 187.429452][ T6569] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(AT_FDCWD, "./81/file1", [pid 5075] <... openat resumed>) = 4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 187.474966][ T6569] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.499489][ T6568] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] newfstatat(4, "", [pid 6567] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] getdents64(4, [pid 5074] close(3 [pid 5072] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6568] <... write resumed>) = 53248 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... close resumed>) = 0 [pid 5072] <... openat resumed>) = 4 [pid 5075] getdents64(4, [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6576 [pid 5072] newfstatat(4, "", [pid 5075] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... close resumed>) = 0 [pid 5072] getdents64(4, ./strace-static-x86_64: Process 6576 attached 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] rmdir("./81/file1" [pid 6576] set_robust_list(0x5555571ca6a0, 24 [pid 5072] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6576] <... set_robust_list resumed>) = 0 [pid 6568] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] close(4 [pid 6576] chdir("./83" [pid 6563] exit_group(0 [pid 5072] <... close resumed>) = 0 [pid 6576] <... chdir resumed>) = 0 [pid 6574] <... futex resumed>) = ? [pid 6568] <... futex resumed>) = ? [pid 6563] <... exit_group resumed>) = ? [pid 5075] getdents64(3, [pid 6576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6574] +++ exited with 0 +++ [pid 6568] +++ exited with 0 +++ [ 187.528008][ T6568] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.538422][ T5082] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 187.551669][ T6569] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6563] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] rmdir("./81/file1" [pid 6576] <... prctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6563, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6576] setpgid(0, 0 [pid 5075] close(3 [pid 5072] <... rmdir resumed>) = 0 [pid 6576] <... setpgid resumed>) = 0 [pid 5072] getdents64(3, [pid 6576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6575] <... open resumed>) = 5 [pid 6569] <... write resumed>) = 53248 [pid 5075] <... close resumed>) = 0 [pid 5073] close(3 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... close resumed>) = 0 [pid 6576] <... openat resumed>) = 3 [pid 5072] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6576] write(3, "1000", 4 [pid 6575] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] rmdir("./81" [pid 5072] <... close resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./82/binderfs" [pid 6575] <... futex resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5072] rmdir("./81" [pid 6575] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... rmdir resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5072] mkdir("./82", 0777./strace-static-x86_64: Process 6577 attached [pid 5076] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] set_robust_list(0x5555571ca6a0, 24 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6577 [pid 6577] <... set_robust_list resumed>) = 0 [pid 6569] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... mkdir resumed>) = 0 [pid 6577] chdir("./82") = 0 [pid 6569] <... futex resumed>) = 0 [pid 6576] <... write resumed>) = 4 [pid 5075] mkdir("./82", 0777 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6576] close(3 [pid 6569] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6567] exit_group(0 [pid 6575] <... futex resumed>) = ? [pid 6569] <... futex resumed>) = ? [pid 6567] <... exit_group resumed>) = ? [pid 6575] +++ exited with 0 +++ [pid 5072] <... openat resumed>) = 3 [pid 6577] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6577] setpgid(0, 0) = 0 [pid 6577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6576] <... close resumed>) = 0 [pid 6569] +++ exited with 0 +++ [pid 6567] +++ exited with 0 +++ [pid 5075] <... mkdir resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6576] symlink("/dev/binderfs", "./binderfs" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6577] <... openat resumed>) = 3 [pid 6576] <... symlink resumed>) = 0 [pid 6577] write(3, "1000", 4 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6567, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6577] <... write resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5071] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] close(3 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6577] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5071] <... openat resumed>) = 3 [pid 5071] newfstatat(3, "", [pid 6577] symlink("/dev/binderfs", "./binderfs" [pid 6576] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6577] <... symlink resumed>) = 0 [pid 5071] getdents64(3, [pid 6577] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6577] <... futex resumed>) = 0 [pid 5071] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6576] <... futex resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6577] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6576] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... umount2 resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./83/binderfs", [pid 6577] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6576] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] unlink("./83/binderfs" [pid 6577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] newfstatat(AT_FDCWD, "./82/file1", [pid 5071] <... unlink resumed>) = 0 [pid 6577] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6577] <... mprotect resumed>) = 0 [pid 5076] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6577] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6576] <... mmap resumed>) = 0x7eff81ead000 [ 187.590383][ T6569] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6578 attached [pid 6576] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... openat resumed>) = 4 [pid 6578] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6577] <... clone3 resumed> => {parent_tid=[6578]}, 88) = 6578 [pid 6578] <... rseq resumed>) = 0 [pid 6577] rt_sigprocmask(SIG_SETMASK, [], [pid 6576] <... mprotect resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6578] set_robust_list(0x7eff81ecd9a0, 24 [pid 6577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6578] <... set_robust_list resumed>) = 0 [pid 6577] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6578] rt_sigprocmask(SIG_SETMASK, [], [pid 6577] <... futex resumed>) = 0 [pid 6578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6577] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] getdents64(4, [pid 6578] memfd_create("syzkaller", 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 6578] <... memfd_create resumed>) = 3 [pid 6576] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6578] <... mmap resumed>) = 0x7eff79a00000 [pid 6576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] rmdir("./82/file1" [pid 5071] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6579 attached [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6579] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6576] <... clone3 resumed> => {parent_tid=[6579]}, 88) = 6579 [pid 5071] newfstatat(AT_FDCWD, "./83/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] getdents64(3, [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5076] close(3) = 0 [pid 5076] rmdir("./82" [pid 5071] getdents64(4, [pid 6579] <... rseq resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_SETMASK, [], [pid 6579] set_robust_list(0x7eff81ecd9a0, 24 [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6576] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6579] <... set_robust_list resumed>) = 0 [pid 6578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6576] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] mkdir("./83", 0777 [pid 5071] getdents64(4, [pid 5076] <... mkdir resumed>) = 0 [pid 6579] rt_sigprocmask(SIG_SETMASK, [], [pid 6578] <... write resumed>) = 524288 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6579] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5071] close(4 [pid 6579] memfd_create("syzkaller", 0 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./83/file1" [pid 6579] <... memfd_create resumed>) = 3 [pid 5075] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5075] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] close(3 [pid 6579] <... mmap resumed>) = 0x7eff79a00000 [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./83" [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6580 [pid 5071] <... rmdir resumed>) = 0 [pid 6578] munmap(0x7eff79a00000, 138412032./strace-static-x86_64: Process 6580 attached ) = 0 [pid 5071] mkdir("./84", 0777 [pid 6580] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6580] chdir("./82" [pid 6578] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5071] <... mkdir resumed>) = 0 [pid 6578] ioctl(4, LOOP_SET_FD, 3 [pid 6580] <... chdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6580] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6581 attached ) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6581] set_robust_list(0x5555571ca6a0, 24 [pid 6580] setpgid(0, 0 [pid 6579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6581 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6581] <... set_robust_list resumed>) = 0 [pid 6581] chdir("./82") = 0 [pid 6581] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6581] setpgid(0, 0) = 0 [pid 6580] <... setpgid resumed>) = 0 [pid 6580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6580] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 6580] write(3, "1000", 4) = 4 [pid 6580] close(3 [pid 6581] <... openat resumed>) = 3 [pid 6580] <... close resumed>) = 0 [pid 5076] close(3 [pid 6580] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... close resumed>) = 0 [pid 6581] write(3, "1000", 4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6580] <... symlink resumed>) = 0 [pid 6581] <... write resumed>) = 4 [pid 6580] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6581] close(3 [pid 6580] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6578] <... ioctl resumed>) = 0 [pid 6581] <... close resumed>) = 0 [pid 6580] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6578] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6582 [pid 6581] symlink("/dev/binderfs", "./binderfs" [pid 6580] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6578] <... close resumed>) = 0 [pid 6581] <... symlink resumed>) = 0 [pid 6580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6578] close(4./strace-static-x86_64: Process 6582 attached [pid 6581] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... close resumed>) = 0 [pid 6582] set_robust_list(0x5555571ca6a0, 24 [pid 6581] <... futex resumed>) = 0 [pid 6580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6578] mkdir("./file1", 0777 [pid 6582] <... set_robust_list resumed>) = 0 [pid 6581] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6582] chdir("./83" [pid 6581] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6578] <... mkdir resumed>) = 0 [pid 6582] <... chdir resumed>) = 0 [pid 6581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6580] <... mmap resumed>) = 0x7eff81ead000 [pid 6578] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6582] <... prctl resumed>) = 0 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6580] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6579] <... write resumed>) = 524288 [pid 6582] setpgid(0, 0 [pid 6581] <... mmap resumed>) = 0x7eff81ead000 [pid 6580] <... mprotect resumed>) = 0 [pid 6579] munmap(0x7eff79a00000, 138412032 [pid 6582] <... setpgid resumed>) = 0 [ 187.758225][ T6578] loop2: detected capacity change from 0 to 1024 [pid 6581] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6581] <... mprotect resumed>) = 0 [pid 6579] <... munmap resumed>) = 0 [pid 6580] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6580] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6582] <... openat resumed>) = 3 [pid 6581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6579] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6582] write(3, "1000", 4 [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6583 attached [pid 6580] <... clone3 resumed> => {parent_tid=[6583]}, 88) = 6583 [pid 6579] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6584 attached [pid 6583] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6582] <... write resumed>) = 4 [pid 6580] rt_sigprocmask(SIG_SETMASK, [], [pid 6579] ioctl(4, LOOP_SET_FD, 3 [pid 6584] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6583] <... rseq resumed>) = 0 [pid 6582] close(3 [pid 6581] <... clone3 resumed> => {parent_tid=[6584]}, 88) = 6584 [pid 6580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6584] <... rseq resumed>) = 0 [pid 6582] <... close resumed>) = 0 [pid 6581] rt_sigprocmask(SIG_SETMASK, [], [pid 6584] set_robust_list(0x7eff81ecd9a0, 24 [pid 6582] symlink("/dev/binderfs", "./binderfs" [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] <... set_robust_list resumed>) = 0 [pid 6582] <... symlink resumed>) = 0 [pid 6581] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] rt_sigprocmask(SIG_SETMASK, [], [pid 6581] <... futex resumed>) = 0 [pid 6581] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] memfd_create("syzkaller", 0 [pid 6582] <... futex resumed>) = 0 [pid 6582] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6584] <... memfd_create resumed>) = 3 [pid 6582] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6580] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] set_robust_list(0x7eff81ecd9a0, 24 [pid 5071] close(3 [pid 6584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6582] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6580] <... futex resumed>) = 0 [pid 6583] <... set_robust_list resumed>) = 0 [pid 6582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6580] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] <... close resumed>) = 0 [pid 6584] <... mmap resumed>) = 0x7eff79a00000 [pid 6583] rt_sigprocmask(SIG_SETMASK, [], [pid 6582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6583] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] <... mmap resumed>) = 0x7eff81ead000 [pid 6583] memfd_create("syzkaller", 0) = 3 [pid 6582] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6579] <... ioctl resumed>) = 0 [pid 6583] <... mmap resumed>) = 0x7eff79a00000 [pid 6582] <... mprotect resumed>) = 0 [pid 6579] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6585 ./strace-static-x86_64: Process 6585 attached [pid 6584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6582] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6579] <... close resumed>) = 0 [pid 6578] <... mount resumed>) = 0 [pid 6585] set_robust_list(0x5555571ca6a0, 24 [pid 6583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6579] close(4 [pid 6585] <... set_robust_list resumed>) = 0 [pid 6584] <... write resumed>) = 524288 [pid 6582] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6585] chdir("./84" [pid 6578] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6579] <... close resumed>) = 0 [pid 6578] <... openat resumed>) = 3 [pid 6579] mkdir("./file1", 0777 [pid 6585] <... chdir resumed>) = 0 [pid 6585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6582] <... clone3 resumed> => {parent_tid=[6586]}, 88) = 6586 [pid 6578] chdir("./file1" [pid 6582] rt_sigprocmask(SIG_SETMASK, [], [pid 6578] <... chdir resumed>) = 0 [pid 6582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6578] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6582] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... openat resumed>) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 6586 attached [pid 6585] <... prctl resumed>) = 0 [pid 6582] <... futex resumed>) = 0 [pid 6579] <... mkdir resumed>) = 0 [pid 6585] setpgid(0, 0 [pid 6582] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6578] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] <... setpgid resumed>) = 0 [pid 6578] <... futex resumed>) = 1 [ 187.829085][ T6579] loop3: detected capacity change from 0 to 1024 [pid 6579] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6586] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6578] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] <... futex resumed>) = 0 [pid 6586] <... rseq resumed>) = 0 [pid 6585] <... openat resumed>) = 3 [pid 6577] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] set_robust_list(0x7eff81ecd9a0, 24 [pid 6585] write(3, "1000", 4 [pid 6578] <... futex resumed>) = 0 [pid 6577] <... futex resumed>) = 1 [pid 6586] <... set_robust_list resumed>) = 0 [pid 6585] <... write resumed>) = 4 [pid 6584] munmap(0x7eff79a00000, 138412032 [pid 6578] creat("./file0", 000 [pid 6577] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6586] rt_sigprocmask(SIG_SETMASK, [], [pid 6585] close(3 [pid 6584] <... munmap resumed>) = 0 [pid 6583] <... write resumed>) = 524288 [pid 6578] <... creat resumed>) = 4 [pid 6586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6585] <... close resumed>) = 0 [pid 6586] memfd_create("syzkaller", 0 [pid 6578] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... memfd_create resumed>) = 3 [pid 6585] symlink("/dev/binderfs", "./binderfs" [pid 6578] <... futex resumed>) = 1 [pid 6577] <... futex resumed>) = 0 [pid 6586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6585] <... symlink resumed>) = 0 [pid 6584] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6578] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... mmap resumed>) = 0x7eff79a00000 [pid 6584] <... openat resumed>) = 4 [pid 6578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6577] <... futex resumed>) = 0 [pid 6585] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] munmap(0x7eff79a00000, 138412032 [pid 6579] <... mount resumed>) = 0 [pid 6578] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6577] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6585] <... futex resumed>) = 0 [pid 6584] ioctl(4, LOOP_SET_FD, 3 [pid 6583] <... munmap resumed>) = 0 [pid 6579] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6585] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6585] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6583] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6579] <... openat resumed>) = 3 [pid 6579] chdir("./file1" [pid 6583] <... openat resumed>) = 4 [pid 6579] <... chdir resumed>) = 0 [pid 6579] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6583] ioctl(4, LOOP_SET_FD, 3 [pid 6585] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6585] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6585] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6579] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6579] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] <... clone3 resumed> => {parent_tid=[6587]}, 88) = 6587 [pid 6579] <... futex resumed>) = 1 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], [pid 6579] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6587 attached [pid 6586] <... write resumed>) = 524288 [pid 6585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] <... ioctl resumed>) = 0 [pid 6576] <... futex resumed>) = 0 [pid 6587] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6585] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] close(3 [pid 6587] <... rseq resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 6584] <... close resumed>) = 0 [pid 6587] set_robust_list(0x7eff81ecd9a0, 24 [pid 6585] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6584] close(4 [pid 6577] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6587] <... set_robust_list resumed>) = 0 [pid 6584] <... close resumed>) = 0 [pid 6577] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] rt_sigprocmask(SIG_SETMASK, [], [pid 6584] mkdir("./file1", 0777 [pid 6577] <... futex resumed>) = 0 [pid 6587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] <... mkdir resumed>) = 0 [pid 6579] <... futex resumed>) = 0 [ 187.923239][ T6584] loop4: detected capacity change from 0 to 1024 [ 187.936093][ T6578] hfsplus: request for non-existent node 16777216 in B*Tree [ 187.947774][ T6583] loop1: detected capacity change from 0 to 1024 [pid 6577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6576] <... futex resumed>) = 1 [pid 6587] memfd_create("syzkaller", 0 [pid 6579] creat("./file0", 000 [pid 6577] <... mmap resumed>) = 0x7eff81e8c000 [pid 6576] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6583] <... ioctl resumed>) = 0 [pid 6579] <... creat resumed>) = 4 [pid 6587] <... memfd_create resumed>) = 3 [pid 6584] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6583] close(3 [pid 6577] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6586] munmap(0x7eff79a00000, 138412032 [pid 6583] <... close resumed>) = 0 [pid 6579] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] <... mprotect resumed>) = 0 [pid 6587] <... mmap resumed>) = 0x7eff79a00000 [pid 6583] close(4 [pid 6579] <... futex resumed>) = 1 [pid 6577] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6576] <... futex resumed>) = 0 [pid 6587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6586] <... munmap resumed>) = 0 [pid 6583] <... close resumed>) = 0 [pid 6579] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6576] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] mkdir("./file1", 0777 [pid 6579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6576] <... futex resumed>) = 0 [pid 6577] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6576] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6583] <... mkdir resumed>) = 0 [pid 6579] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6577] <... clone3 resumed> => {parent_tid=[6588]}, 88) = 6588 [pid 6577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6577] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6588 attached ) = 0 [pid 6588] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6587] <... write resumed>) = 524288 [pid 6586] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6584] <... mount resumed>) = 0 [pid 6577] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6588] <... rseq resumed>) = 0 [ 187.979148][ T6578] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6583] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6588] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6588] rt_sigprocmask(SIG_SETMASK, [], [pid 6584] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] chdir("./file1" [pid 6588] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6584] <... chdir resumed>) = 0 [pid 6586] <... openat resumed>) = 4 [pid 6584] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6584] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6584] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] <... futex resumed>) = 0 [pid 6581] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] <... futex resumed>) = 0 [pid 6581] <... futex resumed>) = 1 [pid 6584] creat("./file0", 000 [pid 6581] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... creat resumed>) = 4 [pid 6584] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] munmap(0x7eff79a00000, 138412032 [pid 6584] <... futex resumed>) = 1 [pid 6581] <... futex resumed>) = 0 [pid 6584] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... munmap resumed>) = 0 [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6581] <... futex resumed>) = 0 [pid 6584] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6581] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6586] ioctl(4, LOOP_SET_FD, 3 [pid 6576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6588] <... open resumed>) = 5 [pid 6587] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6576] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6588] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... openat resumed>) = 4 [pid 6588] <... futex resumed>) = 1 [pid 6577] <... futex resumed>) = 0 [ 188.021231][ T6578] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.045341][ T6579] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.052422][ T6578] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.061137][ T6586] loop5: detected capacity change from 0 to 1024 [pid 6588] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6587] ioctl(4, LOOP_SET_FD, 3 [pid 6576] <... futex resumed>) = 0 [pid 6583] <... mount resumed>) = 0 [pid 6576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6586] <... ioctl resumed>) = 0 [pid 6583] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6576] <... mmap resumed>) = 0x7eff81e8c000 [pid 6586] close(3 [pid 6583] <... openat resumed>) = 3 [pid 6586] <... close resumed>) = 0 [pid 6576] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6583] chdir("./file1" [pid 6586] close(4) = 0 [pid 6583] <... chdir resumed>) = 0 [pid 6576] <... mprotect resumed>) = 0 [pid 6586] mkdir("./file1", 0777 [pid 6583] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6581] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... mkdir resumed>) = 0 [pid 6586] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6583] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6581] <... futex resumed>) = 0 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6583] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6581] <... mmap resumed>) = 0x7eff81e8c000 [pid 6580] <... futex resumed>) = 0 [pid 6583] creat("./file0", 000 [pid 6581] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6580] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] <... mprotect resumed>) = 0 [pid 6580] <... futex resumed>) = 0 [pid 6583] <... creat resumed>) = 4 [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6580] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6587] <... ioctl resumed>) = 0 [pid 6583] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6576] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6587] close(3) = 0 [pid 6581] <... clone3 resumed> => {parent_tid=[6589]}, 88) = 6589 [pid 6587] close(4 [pid 6581] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6589 attached [pid 6587] <... close resumed>) = 0 [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6587] mkdir("./file1", 0777 [pid 6581] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] <... rseq resumed>) = 0 [pid 6587] <... mkdir resumed>) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6589] set_robust_list(0x7eff81eac9a0, 24 [ 188.071388][ T6587] loop0: detected capacity change from 0 to 1024 [ 188.078640][ T6579] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.082389][ T6578] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.095582][ T6584] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6581] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6589] <... set_robust_list resumed>) = 0 [pid 6587] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6586] <... mount resumed>) = 0 [pid 6583] <... futex resumed>) = 1 [pid 6580] <... futex resumed>) = 0 [pid 6576] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6589] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6589] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6586] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6583] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6580] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6580] <... futex resumed>) = 0 [pid 6580] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6590 attached [pid 6586] <... openat resumed>) = 3 [pid 6576] <... clone3 resumed> => {parent_tid=[6590]}, 88) = 6590 [pid 6586] chdir("./file1" [pid 6576] rt_sigprocmask(SIG_SETMASK, [], [pid 6590] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6590] set_robust_list(0x7eff81eac9a0, 24 [pid 6586] <... chdir resumed>) = 0 [pid 6576] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] <... set_robust_list resumed>) = 0 [pid 6576] <... futex resumed>) = 0 [pid 6590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6590] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6586] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6576] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6586] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6586] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6582] <... futex resumed>) = 0 [pid 6586] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 188.120596][ T6584] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.128559][ T6579] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.133534][ T6578] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6582] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... mount resumed>) = 0 [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6582] <... futex resumed>) = 0 [pid 6587] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6582] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6587] <... openat resumed>) = 3 [pid 6587] chdir("./file1") = 0 [pid 6587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6587] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6587] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] <... futex resumed>) = 0 [pid 6585] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... futex resumed>) = 0 [pid 6586] creat("./file0", 000 [pid 6585] <... futex resumed>) = 1 [pid 6587] creat("./file0", 000 [pid 6585] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6587] <... creat resumed>) = 4 [pid 6586] <... creat resumed>) = 4 [pid 6587] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... write resumed>) = 53248 [pid 6586] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... futex resumed>) = 1 [pid 6586] <... futex resumed>) = 1 [pid 6585] <... futex resumed>) = 0 [pid 6582] <... futex resumed>) = 0 [pid 6578] <... futex resumed>) = 0 [pid 6587] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6586] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6577] exit_group(0 [pid 6589] <... open resumed>) = 5 [pid 6588] <... futex resumed>) = ? [ 188.161895][ T6584] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.170009][ T6584] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.172157][ T6579] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6587] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6585] <... futex resumed>) = 0 [pid 6582] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... futex resumed>) = ? [pid 6577] <... exit_group resumed>) = ? [pid 6589] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6588] +++ exited with 0 +++ [pid 6587] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6586] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6585] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6582] <... futex resumed>) = 0 [pid 6580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6578] +++ exited with 0 +++ [pid 6577] +++ exited with 0 +++ [pid 6576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6589] <... futex resumed>) = 0 [pid 6582] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6580] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6577, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6580] <... futex resumed>) = 0 [pid 5073] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6580] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6580] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] <... openat resumed>) = 3 [pid 6580] <... mprotect resumed>) = 0 [pid 6580] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5073] newfstatat(3, "", [pid 6580] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6590] <... open resumed>) = 5 [pid 6580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5073] getdents64(3, [pid 6580] <... clone3 resumed> => {parent_tid=[6591]}, 88) = 6591 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6580] rt_sigprocmask(SIG_SETMASK, [], [ 188.212337][ T6583] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.217908][ T6584] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.228003][ T6583] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.240850][ T6587] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.252391][ T6579] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6580] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./82/binderfs", [pid 6580] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6591 attached [pid 6580] <... futex resumed>) = 0 [pid 5073] unlink("./82/binderfs" [pid 6591] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6580] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... unlink resumed>) = 0 [pid 6591] <... rseq resumed>) = 0 [pid 6585] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6590] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6591] set_robust_list(0x7eff81eac9a0, 24 [pid 6590] <... futex resumed>) = 0 [pid 6585] <... futex resumed>) = 0 [pid 6591] <... set_robust_list resumed>) = 0 [pid 6585] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6591] rt_sigprocmask(SIG_SETMASK, [], [pid 6585] <... mmap resumed>) = 0x7eff81e8c000 [pid 6591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6590] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6591] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6585] <... mprotect resumed>) = 0 [pid 6579] <... write resumed>) = 53248 [pid 6582] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6582] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6582] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6582] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6579] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6585] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6579] <... futex resumed>) = 0 [pid 6585] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6585] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6582] <... clone3 resumed> => {parent_tid=[6592]}, 88) = 6592 [pid 6579] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6576] exit_group(0./strace-static-x86_64: Process 6592 attached [pid 6590] <... futex resumed>) = ? [pid 6582] rt_sigprocmask(SIG_SETMASK, [], [pid 6579] <... futex resumed>) = ? [pid 6576] <... exit_group resumed>) = ? [ 188.260699][ T6579] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.270679][ T6586] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.279672][ T6583] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.283616][ T6584] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.292728][ T6586] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6592] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6590] +++ exited with 0 +++ [pid 6592] <... rseq resumed>) = 0 [pid 6592] set_robust_list(0x7eff81eac9a0, 24 [pid 6585] <... clone3 resumed> => {parent_tid=[6593]}, 88) = 6593 [pid 6582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6580] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6592] <... set_robust_list resumed>) = 0 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], [pid 6582] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] rt_sigprocmask(SIG_SETMASK, [], [pid 6585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] <... futex resumed>) = 0 [pid 6592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6585] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6585] <... futex resumed>) = 0 [pid 6585] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6592] <... open resumed>) = 5 [pid 6592] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6582] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6593 attached [pid 5073] <... umount2 resumed>) = 0 [pid 6592] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6593] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6579] +++ exited with 0 +++ [pid 6576] +++ exited with 0 +++ [pid 6593] <... rseq resumed>) = 0 [pid 5073] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6593] set_robust_list(0x7eff81eac9a0, 24 [pid 6591] <... open resumed>) = 5 [pid 6591] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6591] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6584] <... write resumed>) = 53248 [pid 6584] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6584] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] exit_group(0 [pid 6589] <... futex resumed>) = ? [pid 6584] <... futex resumed>) = ? [pid 6581] <... exit_group resumed>) = ? [pid 6593] <... set_robust_list resumed>) = 0 [pid 6589] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6576, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 188.315644][ T6587] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.316649][ T6583] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.337958][ T6586] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.343264][ T6587] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.352961][ T6586] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 5073] newfstatat(AT_FDCWD, "./82/file1", [pid 6585] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6584] +++ exited with 0 +++ [pid 6581] +++ exited with 0 +++ [pid 6585] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6581, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6593] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5074] <... restart_syscall resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6593] <... open resumed>) = 5 [ 188.366751][ T6587] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.370463][ T6583] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.406595][ T6583] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6593] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6593] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... openat resumed>) = 3 [pid 5073] <... openat resumed>) = 4 [pid 6593] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6583] <... write resumed>) = 53248 [pid 5075] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] newfstatat(3, "", [pid 5073] newfstatat(4, "", [pid 6583] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6587] <... write resumed>) = 53248 [pid 6583] <... futex resumed>) = 0 [pid 6580] exit_group(0 [pid 5075] newfstatat(3, "", [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6587] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6583] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(3, [pid 5073] getdents64(4, [pid 6587] <... futex resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6591] <... futex resumed>) = ? [pid 6587] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6585] exit_group(0 [pid 6583] <... futex resumed>) = ? [pid 6580] <... exit_group resumed>) = ? [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5075] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5073] close(4 [pid 5075] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./83/binderfs" [pid 5073] rmdir("./82/file1" [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5075] unlink("./82/binderfs" [pid 5074] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 6593] <... futex resumed>) = ? [pid 6591] +++ exited with 0 +++ [pid 6585] <... exit_group resumed>) = ? [pid 6583] +++ exited with 0 +++ [pid 6580] +++ exited with 0 +++ [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6593] +++ exited with 0 +++ [pid 6587] <... futex resumed>) = ? [pid 5075] <... unlink resumed>) = 0 [pid 5073] close(3 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6580, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5073] <... close resumed>) = 0 [pid 5073] rmdir("./82" [pid 6587] +++ exited with 0 +++ [pid 6586] <... write resumed>) = 53248 [pid 6585] +++ exited with 0 +++ [pid 5073] <... rmdir resumed>) = 0 [pid 5075] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] mkdir("./83", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6585, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6586] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 6586] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6586] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] exit_group(0 [pid 5074] newfstatat(AT_FDCWD, "./83/file1", [pid 5073] <... openat resumed>) = 3 [pid 5072] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6592] <... futex resumed>) = ? [pid 6586] <... futex resumed>) = ? [pid 6582] <... exit_group resumed>) = ? [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6592] +++ exited with 0 +++ [pid 6586] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = 0 [pid 5074] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./82/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 4 [pid 5072] getdents64(3, [pid 5071] newfstatat(3, "", [pid 5075] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 188.410175][ T6587] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.425770][ T6586] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.434704][ T6587] hfsplus: request for non-existent node 16777216 in B*Tree [ 188.447994][ T6586] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] newfstatat(4, "", [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6582] +++ exited with 0 +++ [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] getdents64(4, [pid 5071] getdents64(3, [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6582, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] <... openat resumed>) = 4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(4, "", [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] unlink("./82/binderfs" [pid 5071] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5072] <... unlink resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5072] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] getdents64(3, [pid 5075] getdents64(4, [pid 5074] close(4 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... close resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5076] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5074] rmdir("./83/file1" [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5071] unlink("./84/binderfs" [pid 5076] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5075] close(4 [pid 5074] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] unlink("./83/binderfs" [pid 5075] rmdir("./82/file1" [pid 5074] close(3 [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5076] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5074] rmdir("./83" [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5075] close(3 [pid 5074] mkdir("./84", 0777 [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] rmdir("./82" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5072] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./83/file1", [pid 5071] newfstatat(AT_FDCWD, "./84/file1", [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] newfstatat(AT_FDCWD, "./82/file1", [pid 5071] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... openat resumed>) = 4 [pid 5075] mkdir("./83", 0777 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] newfstatat(4, "", [pid 5071] <... openat resumed>) = 4 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] getdents64(4, [pid 5075] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(4, "", [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... ioctl resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] close(3 [pid 5072] <... openat resumed>) = 4 [pid 5071] getdents64(4, [pid 5076] getdents64(4, [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] close(4 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 5076] <... close resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 5072] getdents64(4, [pid 5076] rmdir("./83/file1" [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] getdents64(4, [pid 5071] rmdir("./84/file1" [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./82/file1") = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6594 attached [pid 5076] close(3 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5072] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./84" [pid 5076] <... close resumed>) = 0 [pid 5072] close(3 [pid 5071] <... rmdir resumed>) = 0 [pid 5076] rmdir("./83" [pid 5072] <... close resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5072] rmdir("./82") = 0 [pid 5071] mkdir("./85", 0777 [pid 6594] set_robust_list(0x5555571ca6a0, 24 [pid 5075] <... ioctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6594 [pid 5076] mkdir("./84", 0777 [pid 5072] mkdir("./83", 0777) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6594] <... set_robust_list resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... openat resumed>) = 3 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5072] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... openat resumed>) = 3 [pid 6594] chdir("./83" [pid 5075] close(3 [pid 5074] <... ioctl resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6594] <... chdir resumed>) = 0 [pid 6594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... close resumed>) = 0 [pid 5074] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6594] setpgid(0, 0) = 0 [pid 6594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6595 attached ./strace-static-x86_64: Process 6596 attached ) = 3 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6596 [pid 6594] write(3, "1000", 4) = 4 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6595 [pid 6594] close(3 [pid 6595] set_robust_list(0x5555571ca6a0, 24 [pid 6594] <... close resumed>) = 0 [pid 6595] <... set_robust_list resumed>) = 0 [pid 6594] symlink("/dev/binderfs", "./binderfs" [pid 6595] chdir("./84" [pid 6596] set_robust_list(0x5555571ca6a0, 24 [pid 6594] <... symlink resumed>) = 0 [pid 6594] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] <... chdir resumed>) = 0 [pid 6596] <... set_robust_list resumed>) = 0 [pid 6594] <... futex resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 6595] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6596] chdir("./83" [pid 6594] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6594] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6595] <... prctl resumed>) = 0 [pid 6594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6595] setpgid(0, 0 [pid 6594] <... mmap resumed>) = 0x7eff81ead000 [pid 6594] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6595] <... setpgid resumed>) = 0 [pid 6594] <... mprotect resumed>) = 0 [pid 6595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6596] <... chdir resumed>) = 0 [pid 6594] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6595] <... openat resumed>) = 3 [pid 6596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6594] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6595] write(3, "1000", 4 [pid 6596] <... prctl resumed>) = 0 [pid 6594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] close(3 [pid 6596] setpgid(0, 0./strace-static-x86_64: Process 6597 attached [pid 6595] <... write resumed>) = 4 [pid 6596] <... setpgid resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6597] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6595] close(3 [pid 6596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6594] <... clone3 resumed> => {parent_tid=[6597]}, 88) = 6597 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6598 attached [pid 6597] <... rseq resumed>) = 0 [pid 6595] <... close resumed>) = 0 [pid 6596] <... openat resumed>) = 3 [pid 6594] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6599 attached [pid 6598] set_robust_list(0x5555571ca6a0, 24 [pid 6597] set_robust_list(0x7eff81ecd9a0, 24 [pid 6595] symlink("/dev/binderfs", "./binderfs" [pid 6594] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6598 [pid 5072] close(3 [pid 6596] write(3, "1000", 4 [pid 6599] set_robust_list(0x5555571ca6a0, 24 [pid 6598] <... set_robust_list resumed>) = 0 [pid 6597] <... set_robust_list resumed>) = 0 [pid 6595] <... symlink resumed>) = 0 [pid 6596] <... write resumed>) = 4 [pid 6594] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... close resumed>) = 0 [pid 6599] <... set_robust_list resumed>) = 0 [pid 6598] chdir("./84" [pid 6597] rt_sigprocmask(SIG_SETMASK, [], [pid 6595] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] close(3 [pid 6594] <... futex resumed>) = 0 [pid 6595] <... futex resumed>) = 0 [pid 6596] <... close resumed>) = 0 [pid 6594] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6599] chdir("./85" [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6598] <... chdir resumed>) = 0 [pid 6596] symlink("/dev/binderfs", "./binderfs" [pid 6599] <... chdir resumed>) = 0 [pid 6598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6597] memfd_create("syzkaller", 0 [pid 6595] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6596] <... symlink resumed>) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6599 [pid 6595] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6600 [pid 6598] <... prctl resumed>) = 0 [pid 6595] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6596] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6598] setpgid(0, 0 [pid 6597] <... memfd_create resumed>) = 3 [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6596] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6600 attached [pid 6599] <... prctl resumed>) = 0 [pid 6598] <... setpgid resumed>) = 0 [pid 6597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6596] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6600] set_robust_list(0x5555571ca6a0, 24 [pid 6599] setpgid(0, 0 [pid 6598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6597] <... mmap resumed>) = 0x7eff79a00000 [pid 6595] <... mmap resumed>) = 0x7eff81ead000 [pid 6596] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6600] <... set_robust_list resumed>) = 0 [pid 6599] <... setpgid resumed>) = 0 [pid 6598] <... openat resumed>) = 3 [pid 6595] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6596] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6600] chdir("./83" [pid 6599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6598] write(3, "1000", 4 [pid 6595] <... mprotect resumed>) = 0 [pid 6596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6599] <... openat resumed>) = 3 [pid 6598] <... write resumed>) = 4 [pid 6595] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6599] write(3, "1000", 4 [pid 6598] close(3 [pid 6595] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6596] <... mmap resumed>) = 0x7eff81ead000 [pid 6600] <... chdir resumed>) = 0 [pid 6599] <... write resumed>) = 4 [pid 6598] <... close resumed>) = 0 [pid 6595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6599] close(3 [pid 6598] symlink("/dev/binderfs", "./binderfs" [pid 6599] <... close resumed>) = 0 [pid 6598] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6601 attached [pid 6600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6599] symlink("/dev/binderfs", "./binderfs" [pid 6596] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6601] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6600] <... prctl resumed>) = 0 [pid 6599] <... symlink resumed>) = 0 [pid 6598] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6596] <... mprotect resumed>) = 0 [pid 6599] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... futex resumed>) = 0 [pid 6599] <... futex resumed>) = 0 [pid 6598] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6596] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6601] <... rseq resumed>) = 0 [pid 6599] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6598] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6595] <... clone3 resumed> => {parent_tid=[6601]}, 88) = 6601 [pid 6596] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6601] set_robust_list(0x7eff81ecd9a0, 24 [pid 6600] setpgid(0, 0 [pid 6595] rt_sigprocmask(SIG_SETMASK, [], [pid 6600] <... setpgid resumed>) = 0 [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6601] <... set_robust_list resumed>) = 0 [pid 6599] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6598] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6595] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] rt_sigprocmask(SIG_SETMASK, [], [pid 6600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6599] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] <... futex resumed>) = 0 [pid 6601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6595] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6601] memfd_create("syzkaller", 0 [pid 6600] <... openat resumed>) = 3 [pid 6599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6598] <... mmap resumed>) = 0x7eff81ead000 [pid 6596] <... clone3 resumed> => {parent_tid=[6602]}, 88) = 6602 ./strace-static-x86_64: Process 6602 attached [pid 6600] write(3, "1000", 4 [pid 6599] <... mmap resumed>) = 0x7eff81ead000 [pid 6598] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6596] rt_sigprocmask(SIG_SETMASK, [], [pid 6602] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6601] <... memfd_create resumed>) = 3 [pid 6600] <... write resumed>) = 4 [pid 6599] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6598] <... mprotect resumed>) = 0 [pid 6597] <... write resumed>) = 524288 [pid 6596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6602] <... rseq resumed>) = 0 [pid 6599] <... mprotect resumed>) = 0 [pid 6596] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] set_robust_list(0x7eff81ecd9a0, 24 [pid 6596] <... futex resumed>) = 0 [pid 6602] <... set_robust_list resumed>) = 0 [pid 6601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6598] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6596] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6602] rt_sigprocmask(SIG_SETMASK, [], [pid 6601] <... mmap resumed>) = 0x7eff79a00000 [pid 6602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6600] close(3 [pid 6599] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6598] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6602] memfd_create("syzkaller", 0 [pid 6600] <... close resumed>) = 0 [pid 6599] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6597] munmap(0x7eff79a00000, 138412032 [pid 6602] <... memfd_create resumed>) = 3 [pid 6600] symlink("/dev/binderfs", "./binderfs" [pid 6599] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6603 attached [pid 6602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 ./strace-static-x86_64: Process 6604 attached [pid 6603] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6600] <... symlink resumed>) = 0 [pid 6598] <... clone3 resumed> => {parent_tid=[6603]}, 88) = 6603 [pid 6597] <... munmap resumed>) = 0 [pid 6604] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6603] <... rseq resumed>) = 0 [pid 6599] <... clone3 resumed> => {parent_tid=[6604]}, 88) = 6604 [pid 6604] <... rseq resumed>) = 0 [pid 6603] set_robust_list(0x7eff81ecd9a0, 24 [pid 6602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6600] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] rt_sigprocmask(SIG_SETMASK, [], [pid 6598] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6604] set_robust_list(0x7eff81ecd9a0, 24 [pid 6603] <... set_robust_list resumed>) = 0 [pid 6600] <... futex resumed>) = 0 [pid 6598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6604] <... set_robust_list resumed>) = 0 [pid 6603] rt_sigprocmask(SIG_SETMASK, [], [pid 6600] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6598] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... openat resumed>) = 4 [pid 6604] rt_sigprocmask(SIG_SETMASK, [], [pid 6603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6603] memfd_create("syzkaller", 0 [pid 6604] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6603] <... memfd_create resumed>) = 3 [pid 6603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6601] <... write resumed>) = 524288 [pid 6600] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6599] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... futex resumed>) = 0 [pid 6597] ioctl(4, LOOP_SET_FD, 3 [pid 6603] <... mmap resumed>) = 0x7eff79a00000 [pid 6603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6602] <... write resumed>) = 524288 [pid 6601] munmap(0x7eff79a00000, 138412032 [pid 6600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6599] <... futex resumed>) = 1 [pid 6598] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6604] <... futex resumed>) = 0 [pid 6597] <... ioctl resumed>) = 0 [pid 6604] memfd_create("syzkaller", 0 [pid 6597] close(3 [pid 6604] <... memfd_create resumed>) = 3 [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6599] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6597] <... close resumed>) = 0 [pid 6604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6597] close(4 [pid 6604] <... mmap resumed>) = 0x7eff79a00000 [pid 6603] <... write resumed>) = 524288 [pid 6602] munmap(0x7eff79a00000, 138412032 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6597] <... close resumed>) = 0 [pid 6601] <... munmap resumed>) = 0 [pid 6601] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6601] ioctl(4, LOOP_SET_FD, 3 [pid 6600] <... mmap resumed>) = 0x7eff81ead000 [pid 6602] <... munmap resumed>) = 0 [pid 6600] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6602] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6597] mkdir("./file1", 0777 [pid 6602] <... openat resumed>) = 4 [pid 6602] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6605 attached [pid 6604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6601] <... ioctl resumed>) = 0 [pid 6597] <... mkdir resumed>) = 0 [pid 6605] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6601] close(3 [pid 6605] <... rseq resumed>) = 0 [pid 6601] <... close resumed>) = 0 [pid 6600] <... clone3 resumed> => {parent_tid=[6605]}, 88) = 6605 [pid 6605] set_robust_list(0x7eff81ecd9a0, 24 [pid 6601] close(4 [pid 6600] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6605] <... set_robust_list resumed>) = 0 [pid 6601] <... close resumed>) = 0 [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6605] rt_sigprocmask(SIG_SETMASK, [], [pid 6603] munmap(0x7eff79a00000, 138412032 [pid 6601] mkdir("./file1", 0777 [pid 6600] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6603] <... munmap resumed>) = 0 [pid 6600] <... futex resumed>) = 0 [pid 6605] memfd_create("syzkaller", 0 [pid 6600] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6603] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6602] <... ioctl resumed>) = 0 [pid 6601] <... mkdir resumed>) = 0 [pid 6605] <... memfd_create resumed>) = 3 [pid 6603] <... openat resumed>) = 4 [ 188.813555][ T6597] loop2: detected capacity change from 0 to 1024 [ 188.835917][ T6601] loop3: detected capacity change from 0 to 1024 [ 188.845237][ T6602] loop4: detected capacity change from 0 to 1024 [pid 6605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6603] ioctl(4, LOOP_SET_FD, 3 [pid 6602] close(3 [pid 6605] <... mmap resumed>) = 0x7eff79a00000 [pid 6602] <... close resumed>) = 0 [pid 6602] close(4 [pid 6601] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6602] <... close resumed>) = 0 [pid 6602] mkdir("./file1", 0777) = 0 [pid 6605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6602] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6603] <... ioctl resumed>) = 0 [pid 6603] close(3) = 0 [pid 6603] close(4) = 0 [pid 6603] mkdir("./file1", 0777 [pid 6601] <... mount resumed>) = 0 [pid 6603] <... mkdir resumed>) = 0 [pid 6601] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6597] <... mount resumed>) = 0 [pid 6602] <... mount resumed>) = 0 [pid 6601] <... openat resumed>) = 3 [pid 6603] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6602] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6597] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6601] chdir("./file1" [pid 6605] <... write resumed>) = 524288 [pid 6604] <... write resumed>) = 524288 [pid 6602] <... openat resumed>) = 3 [pid 6601] <... chdir resumed>) = 0 [pid 6597] <... openat resumed>) = 3 [pid 6605] munmap(0x7eff79a00000, 138412032 [pid 6604] munmap(0x7eff79a00000, 138412032 [pid 6602] chdir("./file1" [pid 6601] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6597] chdir("./file1" [pid 6604] <... munmap resumed>) = 0 [pid 6602] <... chdir resumed>) = 0 [ 188.868943][ T6603] loop5: detected capacity change from 0 to 1024 [pid 6601] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6597] <... chdir resumed>) = 0 [pid 6605] <... munmap resumed>) = 0 [pid 6604] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6602] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6601] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6604] <... openat resumed>) = 4 [pid 6601] <... futex resumed>) = 1 [pid 6597] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6595] <... futex resumed>) = 0 [pid 6605] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6604] ioctl(4, LOOP_SET_FD, 3 [pid 6602] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6601] creat("./file0", 000 [pid 6597] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... openat resumed>) = 4 [pid 6602] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] ioctl(4, LOOP_SET_FD, 3 [pid 6602] <... futex resumed>) = 1 [pid 6597] <... futex resumed>) = 1 [pid 6595] <... futex resumed>) = 0 [pid 6596] <... futex resumed>) = 0 [pid 6594] <... futex resumed>) = 0 [pid 6603] <... mount resumed>) = 0 [pid 6601] <... creat resumed>) = 4 [pid 6603] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6602] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6603] <... openat resumed>) = 3 [pid 6601] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6595] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6603] chdir("./file1" [pid 6602] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6603] <... chdir resumed>) = 0 [pid 6602] creat("./file0", 000 [pid 6603] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6602] <... creat resumed>) = 4 [pid 6603] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6602] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6603] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] <... futex resumed>) = 0 [pid 6603] <... futex resumed>) = 1 [pid 6602] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] <... futex resumed>) = 0 [pid 6603] creat("./file0", 000 [pid 6598] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6603] <... creat resumed>) = 4 [pid 6594] <... futex resumed>) = 0 [pid 6603] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] <... futex resumed>) = 1 [pid 6602] <... futex resumed>) = 0 [pid 6595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6601] <... futex resumed>) = 0 [pid 6603] <... futex resumed>) = 1 [pid 6602] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] <... futex resumed>) = 0 [pid 6597] creat("./file0", 000 [pid 6595] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6603] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] <... futex resumed>) = 0 [pid 6596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6603] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6601] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6598] <... futex resumed>) = 0 [pid 6597] <... creat resumed>) = 4 [pid 6595] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6603] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6598] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6602] <... futex resumed>) = 0 [pid 6596] <... futex resumed>) = 1 [pid 6605] <... ioctl resumed>) = 0 [pid 6597] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6604] <... ioctl resumed>) = 0 [pid 6605] close(3 [pid 6604] close(3 [pid 6602] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6597] <... futex resumed>) = 1 [pid 6594] <... futex resumed>) = 0 [pid 6605] <... close resumed>) = 0 [pid 6604] <... close resumed>) = 0 [pid 6597] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 188.942928][ T6605] loop1: detected capacity change from 0 to 1024 [ 188.950061][ T6604] loop0: detected capacity change from 0 to 1024 [pid 6594] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] close(4 [pid 6604] close(4 [pid 6597] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6594] <... futex resumed>) = 0 [pid 6604] <... close resumed>) = 0 [pid 6597] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6594] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... close resumed>) = 0 [pid 6604] mkdir("./file1", 0777 [pid 6605] mkdir("./file1", 0777 [pid 6604] <... mkdir resumed>) = 0 [ 188.984511][ T6601] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.004378][ T6603] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.011704][ T6603] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.024418][ T6602] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6605] <... mkdir resumed>) = 0 [pid 6604] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6598] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6595] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6598] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] <... futex resumed>) = 0 [pid 6596] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6596] <... futex resumed>) = 0 [pid 6598] <... futex resumed>) = 0 [pid 6595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6595] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6594] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] <... mmap resumed>) = 0x7eff81e8c000 [pid 6598] <... mmap resumed>) = 0x7eff81e8c000 [pid 6594] <... futex resumed>) = 0 [pid 6598] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6595] <... mprotect resumed>) = 0 [pid 6594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6598] <... mprotect resumed>) = 0 [pid 6596] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6594] <... mmap resumed>) = 0x7eff81e8c000 [pid 6605] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6596] <... mprotect resumed>) = 0 [pid 6594] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6595] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6594] <... mprotect resumed>) = 0 [pid 6595] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6596] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6594] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6596] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6594] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6604] <... mount resumed>) = 0 [pid 6596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6604] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6604] chdir("./file1" [pid 6595] <... clone3 resumed> => {parent_tid=[6606]}, 88) = 6606 [pid 6594] <... clone3 resumed> => {parent_tid=[6607]}, 88) = 6607 [pid 6604] <... chdir resumed>) = 0 [pid 6598] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6595] rt_sigprocmask(SIG_SETMASK, [], [pid 6596] <... clone3 resumed> => {parent_tid=[6608]}, 88) = 6608 [pid 6594] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6608 attached ./strace-static-x86_64: Process 6607 attached ./strace-static-x86_64: Process 6606 attached [pid 6604] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6598] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6596] rt_sigprocmask(SIG_SETMASK, [], [pid 6594] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 189.025238][ T6601] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.031710][ T6602] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.053070][ T6597] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.060396][ T6597] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6608] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6607] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6606] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6604] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6595] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6594] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6604] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] <... futex resumed>) = 0 [pid 6599] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6604] <... futex resumed>) = 0 [pid 6599] <... futex resumed>) = 1 [pid 6604] creat("./file0", 000 [pid 6608] <... rseq resumed>) = 0 [pid 6599] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6609 attached [pid 6607] <... rseq resumed>) = 0 [pid 6606] <... rseq resumed>) = 0 [pid 6604] <... creat resumed>) = 4 [pid 6595] <... futex resumed>) = 0 [pid 6596] <... futex resumed>) = 0 [pid 6594] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] set_robust_list(0x7eff81eac9a0, 24 [pid 6607] set_robust_list(0x7eff81eac9a0, 24 [pid 6606] set_robust_list(0x7eff81eac9a0, 24 [pid 6604] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] <... clone3 resumed> => {parent_tid=[6609]}, 88) = 6609 [pid 6595] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6596] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 189.101586][ T6603] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.112582][ T6601] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6609] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6608] <... set_robust_list resumed>) = 0 [pid 6607] <... set_robust_list resumed>) = 0 [pid 6606] <... set_robust_list resumed>) = 0 [pid 6604] <... futex resumed>) = 1 [pid 6599] <... futex resumed>) = 0 [pid 6608] rt_sigprocmask(SIG_SETMASK, [], [pid 6607] rt_sigprocmask(SIG_SETMASK, [], [pid 6606] rt_sigprocmask(SIG_SETMASK, [], [pid 6605] <... mount resumed>) = 0 [pid 6604] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6599] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] rt_sigprocmask(SIG_SETMASK, [], [pid 6608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6606] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6605] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6599] <... futex resumed>) = 0 [ 189.144599][ T6597] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.153276][ T6603] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.162936][ T6601] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.167960][ T6604] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.177616][ T6597] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6609] <... rseq resumed>) = 0 [pid 6608] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6607] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6606] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6605] <... openat resumed>) = 3 [pid 6599] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6609] set_robust_list(0x7eff81eac9a0, 24 [pid 6607] <... open resumed>) = 5 [pid 6606] <... open resumed>) = 5 [pid 6605] chdir("./file1" [pid 6598] <... futex resumed>) = 0 [pid 6595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6596] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6594] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6607] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... chdir resumed>) = 0 [pid 6598] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6607] <... futex resumed>) = 0 [pid 6606] <... futex resumed>) = 0 [pid 6605] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6607] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6606] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6609] <... set_robust_list resumed>) = 0 [pid 6605] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6609] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 6605] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6605] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6599] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... futex resumed>) = 0 [pid 6599] <... futex resumed>) = 0 [pid 6609] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6609] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 1 [pid 6599] <... mmap resumed>) = 0x7eff81e8c000 [pid 6605] <... futex resumed>) = 0 [pid 6598] <... futex resumed>) = 0 [pid 6605] creat("./file0", 000 [pid 6609] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6605] <... creat resumed>) = 4 [pid 6600] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6599] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6599] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6605] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] <... rt_sigprocmask resumed>[], 8) = 0 [ 189.189005][ T6601] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.190887][ T6602] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.203878][ T6597] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.225186][ T6603] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.226761][ T6597] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6599] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6605] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 0 [pid 6605] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6600] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] <... write resumed>) = 53248 [pid 6599] <... clone3 resumed> => {parent_tid=[6610]}, 88) = 6610 [pid 6605] <... futex resumed>) = 0 [pid 6601] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... futex resumed>) = 1 [pid 6599] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] <... write resumed>) = 53248 [pid 6605] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6601] <... futex resumed>) = 0 [pid 6597] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6594] exit_group(0 [pid 6595] exit_group(0./strace-static-x86_64: Process 6610 attached [pid 6606] <... futex resumed>) = ? [pid 6600] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] <... exit_group resumed>) = ? [pid 6610] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6607] <... futex resumed>) = ? [pid 6606] +++ exited with 0 +++ [pid 6599] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... futex resumed>) = ? [pid 6594] <... exit_group resumed>) = ? [pid 6607] +++ exited with 0 +++ [pid 6597] +++ exited with 0 +++ [pid 6610] <... rseq resumed>) = 0 [pid 6599] <... futex resumed>) = 0 [pid 6610] set_robust_list(0x7eff81eac9a0, 24 [pid 6599] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] <... set_robust_list resumed>) = 0 [pid 6610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 189.242598][ T6601] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.245384][ T6603] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.259971][ T6602] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6610] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6594] +++ exited with 0 +++ [pid 6610] <... open resumed>) = 5 [pid 6610] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6599] <... futex resumed>) = 0 [pid 6610] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6608] <... open resumed>) = 5 [pid 6601] +++ exited with 0 +++ [pid 6595] +++ exited with 0 +++ [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6594, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6603] <... write resumed>) = 53248 [pid 6603] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6603] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6608] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6598] exit_group(0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6595, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6608] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6598] <... exit_group resumed>) = ? [pid 5074] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6609] <... futex resumed>) = ? [pid 6603] <... futex resumed>) = ? [pid 6600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6609] +++ exited with 0 +++ [pid 6603] +++ exited with 0 +++ [pid 6600] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6600] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 5074] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... openat resumed>) = 3 [pid 5073] newfstatat(3, "", [pid 6600] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... openat resumed>) = 3 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5073] getdents64(3, [pid 6600] <... mprotect resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5074] getdents64(3, [pid 5073] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6611 attached [pid 6600] <... clone3 resumed> => {parent_tid=[6611]}, 88) = 6611 [pid 5074] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./83/binderfs", [pid 6611] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6602] <... write resumed>) = 53248 [pid 6600] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6611] <... rseq resumed>) = 0 [ 189.285614][ T6604] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.288015][ T6605] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.298232][ T6604] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.308720][ T6602] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.312335][ T6605] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.317951][ T6602] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6602] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6611] set_robust_list(0x7eff81eac9a0, 24 [pid 6602] <... futex resumed>) = 0 [pid 6611] <... set_robust_list resumed>) = 0 [pid 6602] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6600] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] rt_sigprocmask(SIG_SETMASK, [], [pid 6600] <... futex resumed>) = 0 [pid 6611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6600] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6611] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6598] +++ exited with 0 +++ [pid 6596] exit_group(0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] unlink("./83/binderfs" [pid 6602] <... futex resumed>) = ? [pid 6602] +++ exited with 0 +++ [pid 6596] <... exit_group resumed>) = ? [pid 6611] <... open resumed>) = 5 [pid 6608] <... futex resumed>) = ? [pid 5074] unlink("./84/binderfs" [pid 5073] <... unlink resumed>) = 0 [ 189.351800][ T6604] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.352300][ T6605] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.363177][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 189.363195][ T28] audit: type=1800 audit(1708423266.985:509): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 189.368359][ T6605] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6598, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5074] <... unlink resumed>) = 0 [pid 5076] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] newfstatat(AT_FDCWD, "./84/binderfs", [pid 6600] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./84/binderfs" [pid 6611] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6608] +++ exited with 0 +++ [pid 6596] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6596, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... unlink resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, [pid 6611] <... futex resumed>) = 0 [pid 5076] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6611] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6604] <... write resumed>) = 53248 [pid 5075] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6604] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] exit_group(0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6610] <... futex resumed>) = ? [pid 6604] <... futex resumed>) = ? [pid 6599] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./83/binderfs", [pid 6610] +++ exited with 0 +++ [pid 6605] <... write resumed>) = 53248 [pid 6604] +++ exited with 0 +++ [pid 6605] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] exit_group(0 [pid 6611] <... futex resumed>) = ? [pid 6600] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6611] +++ exited with 0 +++ [pid 6605] <... futex resumed>) = ? [pid 6605] +++ exited with 0 +++ [pid 6600] +++ exited with 0 +++ [pid 6599] +++ exited with 0 +++ [pid 5075] unlink("./83/binderfs" [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6600, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6599, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5072] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... restart_syscall resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = 0 [pid 5071] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 3 [pid 5071] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./83/file1", [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5073] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [ 189.390360][ T6604] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.400834][ T6605] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.415270][ T6604] hfsplus: request for non-existent node 16777216 in B*Tree [ 189.422780][ T6605] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] unlink("./85/binderfs" [pid 5073] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... openat resumed>) = 4 [pid 5072] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./84/file1", [pid 5075] newfstatat(AT_FDCWD, "./83/file1", [pid 5074] newfstatat(AT_FDCWD, "./84/file1", [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(4, "", [pid 5072] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, [pid 5072] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] getdents64(4, [pid 5072] unlink("./83/binderfs" [pid 5076] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... unlink resumed>) = 0 [pid 5073] close(4) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5075] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] rmdir("./83/file1" [pid 5072] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 5075] <... openat resumed>) = 4 [pid 5074] <... openat resumed>) = 4 [pid 5071] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] newfstatat(4, "", [pid 5074] newfstatat(4, "", [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(4, [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 5073] getdents64(3, [pid 5072] <... umount2 resumed>) = 0 [pid 5071] newfstatat(AT_FDCWD, "./85/file1", [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 5076] close(4 [pid 5074] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] rmdir("./84/file1" [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] rmdir("./84/file1" [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] close(3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5073] <... close resumed>) = 0 [pid 5076] getdents64(3, [pid 5075] <... close resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./83/file1", [pid 5071] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./83/file1" [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] rmdir("./83" [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5076] close(3 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] close(3 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(4, "", [pid 5076] rmdir("./84" [pid 5074] rmdir("./84" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] <... rmdir resumed>) = 0 [pid 5073] mkdir("./84", 0777 [pid 5072] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(4, [pid 5072] <... openat resumed>) = 4 [pid 5076] mkdir("./85", 0777 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] mkdir("./85", 0777 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] <... mkdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] close(3) = 0 [pid 5075] rmdir("./83" [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] getdents64(4, [pid 5071] getdents64(4, [pid 5075] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5075] mkdir("./84", 0777 [pid 5076] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] close(4 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] <... mkdir resumed>) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] getdents64(4, [pid 5071] <... close resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./85/file1" [pid 5072] close(4 [pid 5075] <... openat resumed>) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] <... openat resumed>) = 3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] rmdir("./83/file1") = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3 [pid 5072] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 5071] rmdir("./85" [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5072] rmdir("./83" [pid 5071] mkdir("./86", 0777) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5072] mkdir("./84", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... ioctl resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] close(3 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6612 ./strace-static-x86_64: Process 6612 attached [pid 5074] <... close resumed>) = 0 [pid 5075] close(3 [pid 6612] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6612] chdir("./85") = 0 [pid 5075] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] close(3 [pid 5071] close(3 [pid 6612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6612] setpgid(0, 0 [pid 5072] close(3 [pid 6612] <... setpgid resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... close resumed>) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... close resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6612] <... openat resumed>) = 3 [pid 6612] write(3, "1000", 4) = 4 [pid 6612] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6613 [pid 6612] <... close resumed>) = 0 [pid 6612] symlink("/dev/binderfs", "./binderfs" [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6615 [pid 6612] <... symlink resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6614 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6616 ./strace-static-x86_64: Process 6615 attached ./strace-static-x86_64: Process 6616 attached [pid 6612] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] set_robust_list(0x5555571ca6a0, 24 [pid 6616] set_robust_list(0x5555571ca6a0, 24 [pid 6612] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6613 attached [pid 6612] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6615] <... set_robust_list resumed>) = 0 [pid 6616] <... set_robust_list resumed>) = 0 [pid 6612] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6617 attached ./strace-static-x86_64: Process 6614 attached [pid 6616] chdir("./86" [pid 6613] set_robust_list(0x5555571ca6a0, 24 [pid 6617] set_robust_list(0x5555571ca6a0, 24 [pid 6615] chdir("./84" [pid 6614] set_robust_list(0x5555571ca6a0, 24 [pid 6616] <... chdir resumed>) = 0 [pid 6613] <... set_robust_list resumed>) = 0 [pid 6612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6617 [pid 6617] <... set_robust_list resumed>) = 0 [pid 6614] <... set_robust_list resumed>) = 0 [pid 6617] chdir("./84" [pid 6614] chdir("./84" [pid 6616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6613] chdir("./85" [pid 6612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6617] <... chdir resumed>) = 0 [pid 6614] <... chdir resumed>) = 0 [pid 6616] <... prctl resumed>) = 0 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6616] setpgid(0, 0 [pid 6613] <... chdir resumed>) = 0 [pid 6612] <... mmap resumed>) = 0x7eff81ead000 [pid 6617] <... prctl resumed>) = 0 [pid 6615] <... chdir resumed>) = 0 [pid 6614] <... prctl resumed>) = 0 [pid 6616] <... setpgid resumed>) = 0 [pid 6612] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6617] setpgid(0, 0 [pid 6615] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6614] setpgid(0, 0 [pid 6616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6615] <... prctl resumed>) = 0 [pid 6612] <... mprotect resumed>) = 0 [pid 6615] setpgid(0, 0 [pid 6614] <... setpgid resumed>) = 0 [pid 6612] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6617] <... setpgid resumed>) = 0 [pid 6613] <... prctl resumed>) = 0 [pid 6615] <... setpgid resumed>) = 0 [pid 6616] <... openat resumed>) = 3 [pid 6612] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6616] write(3, "1000", 4 [pid 6613] setpgid(0, 0 [pid 6612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6618 attached [pid 6617] <... openat resumed>) = 3 [pid 6615] <... openat resumed>) = 3 [pid 6614] <... openat resumed>) = 3 [pid 6616] <... write resumed>) = 4 [pid 6613] <... setpgid resumed>) = 0 [pid 6618] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6617] write(3, "1000", 4 [pid 6615] write(3, "1000", 4 [pid 6614] write(3, "1000", 4 [pid 6616] close(3 [pid 6612] <... clone3 resumed> => {parent_tid=[6618]}, 88) = 6618 [pid 6618] <... rseq resumed>) = 0 [pid 6617] <... write resumed>) = 4 [pid 6615] <... write resumed>) = 4 [pid 6613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6618] set_robust_list(0x7eff81ecd9a0, 24 [pid 6617] close(3 [pid 6614] <... write resumed>) = 4 [pid 6618] <... set_robust_list resumed>) = 0 [pid 6617] <... close resumed>) = 0 [pid 6614] close(3 [pid 6618] rt_sigprocmask(SIG_SETMASK, [], [pid 6617] symlink("/dev/binderfs", "./binderfs" [pid 6618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] <... close resumed>) = 0 [pid 6618] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] symlink("/dev/binderfs", "./binderfs" [pid 6615] close(3 [pid 6616] <... close resumed>) = 0 [pid 6612] rt_sigprocmask(SIG_SETMASK, [], [pid 6615] <... close resumed>) = 0 [pid 6616] symlink("/dev/binderfs", "./binderfs" [pid 6612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6617] <... symlink resumed>) = 0 [pid 6615] symlink("/dev/binderfs", "./binderfs" [pid 6614] <... symlink resumed>) = 0 [pid 6616] <... symlink resumed>) = 0 [pid 6612] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] <... futex resumed>) = 0 [pid 6615] <... symlink resumed>) = 0 [pid 6614] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... openat resumed>) = 3 [pid 6612] <... futex resumed>) = 1 [pid 6618] memfd_create("syzkaller", 0 [pid 6615] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6613] write(3, "1000", 4 [pid 6612] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6617] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... futex resumed>) = 0 [pid 6618] <... memfd_create resumed>) = 3 [pid 6613] <... write resumed>) = 4 [pid 6614] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6617] <... futex resumed>) = 0 [pid 6618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6614] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6613] close(3 [pid 6618] <... mmap resumed>) = 0x7eff79a00000 [pid 6617] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6615] <... futex resumed>) = 0 [pid 6616] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6615] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6616] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6615] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6616] <... mmap resumed>) = 0x7eff81ead000 [pid 6618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6616] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6615] <... mmap resumed>) = 0x7eff81ead000 [pid 6616] <... mprotect resumed>) = 0 [pid 6613] <... close resumed>) = 0 [pid 6617] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6615] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6615] <... mprotect resumed>) = 0 [pid 6614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6616] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6615] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6616] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6613] symlink("/dev/binderfs", "./binderfs" [pid 6615] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6614] <... mmap resumed>) = 0x7eff81ead000 [pid 6613] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6619 attached [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6616] <... clone3 resumed> => {parent_tid=[6619]}, 88) = 6619 ./strace-static-x86_64: Process 6620 attached [pid 6619] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6615] <... clone3 resumed> => {parent_tid=[6620]}, 88) = 6620 [pid 6614] <... mprotect resumed>) = 0 [pid 6616] rt_sigprocmask(SIG_SETMASK, [], [pid 6613] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6619] <... rseq resumed>) = 0 [pid 6617] <... mmap resumed>) = 0x7eff81ead000 [pid 6615] rt_sigprocmask(SIG_SETMASK, [], [pid 6616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6620] <... rseq resumed>) = 0 [pid 6619] set_robust_list(0x7eff81ecd9a0, 24 [pid 6617] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6616] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... futex resumed>) = 0 [pid 6620] set_robust_list(0x7eff81ecd9a0, 24 [pid 6619] <... set_robust_list resumed>) = 0 [pid 6617] <... mprotect resumed>) = 0 [pid 6615] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6613] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6620] <... set_robust_list resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_SETMASK, [], [pid 6615] <... futex resumed>) = 0 [pid 6616] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6613] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6620] rt_sigprocmask(SIG_SETMASK, [], [pid 6619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6617] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6615] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6614] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6620] memfd_create("syzkaller", 0 [pid 6613] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6617] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6620] <... memfd_create resumed>) = 3 [pid 6619] memfd_create("syzkaller", 0 [pid 6617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6621 attached [pid 6620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6619] <... memfd_create resumed>) = 3 [pid 6613] <... mmap resumed>) = 0x7eff81ead000 [pid 6620] <... mmap resumed>) = 0x7eff79a00000 [pid 6614] <... clone3 resumed> => {parent_tid=[6621]}, 88) = 6621 ./strace-static-x86_64: Process 6622 attached [pid 6622] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6614] rt_sigprocmask(SIG_SETMASK, [], [pid 6622] <... rseq resumed>) = 0 [pid 6622] set_robust_list(0x7eff81ecd9a0, 24 [pid 6619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6622] <... set_robust_list resumed>) = 0 [pid 6621] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6619] <... mmap resumed>) = 0x7eff79a00000 [pid 6617] <... clone3 resumed> => {parent_tid=[6622]}, 88) = 6622 [pid 6614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6613] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6622] rt_sigprocmask(SIG_SETMASK, [], [pid 6621] <... rseq resumed>) = 0 [pid 6617] rt_sigprocmask(SIG_SETMASK, [], [pid 6614] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] set_robust_list(0x7eff81ecd9a0, 24 [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] <... futex resumed>) = 0 [pid 6613] <... mprotect resumed>) = 0 [pid 6622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6621] <... set_robust_list resumed>) = 0 [pid 6619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6618] <... write resumed>) = 524288 [pid 6617] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6622] memfd_create("syzkaller", 0 [pid 6621] rt_sigprocmask(SIG_SETMASK, [], [pid 6617] <... futex resumed>) = 0 [pid 6621] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6617] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6622] <... memfd_create resumed>) = 3 [pid 6621] memfd_create("syzkaller", 0 [pid 6620] <... write resumed>) = 524288 [pid 6613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6618] munmap(0x7eff79a00000, 138412032 [pid 6622] <... mmap resumed>) = 0x7eff79a00000 [pid 6621] <... memfd_create resumed>) = 3 [pid 6618] <... munmap resumed>) = 0 [pid 6621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6618] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6621] <... mmap resumed>) = 0x7eff79a00000 ./strace-static-x86_64: Process 6623 attached [pid 6622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6618] <... openat resumed>) = 4 [pid 6623] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6620] munmap(0x7eff79a00000, 138412032 [pid 6618] ioctl(4, LOOP_SET_FD, 3 [pid 6613] <... clone3 resumed> => {parent_tid=[6623]}, 88) = 6623 [pid 6623] <... rseq resumed>) = 0 [pid 6621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6620] <... munmap resumed>) = 0 [pid 6618] <... ioctl resumed>) = 0 [pid 6613] rt_sigprocmask(SIG_SETMASK, [], [pid 6623] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6623] rt_sigprocmask(SIG_SETMASK, [], [pid 6622] <... write resumed>) = 524288 [pid 6621] <... write resumed>) = 524288 [pid 6620] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6621] munmap(0x7eff79a00000, 138412032 [pid 6620] <... openat resumed>) = 4 [pid 6618] close(3 [pid 6613] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 189.855418][ T6618] loop5: detected capacity change from 0 to 1024 [pid 6623] memfd_create("syzkaller", 0 [pid 6622] munmap(0x7eff79a00000, 138412032 [pid 6621] <... munmap resumed>) = 0 [pid 6620] ioctl(4, LOOP_SET_FD, 3 [pid 6619] <... write resumed>) = 524288 [pid 6618] <... close resumed>) = 0 [pid 6613] <... futex resumed>) = 0 [pid 6618] close(4 [pid 6613] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6623] <... memfd_create resumed>) = 3 [pid 6622] <... munmap resumed>) = 0 [pid 6621] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6620] <... ioctl resumed>) = 0 [pid 6619] munmap(0x7eff79a00000, 138412032 [pid 6618] <... close resumed>) = 0 [pid 6623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6621] <... openat resumed>) = 4 [pid 6618] mkdir("./file1", 0777) = 0 [pid 6623] <... mmap resumed>) = 0x7eff79a00000 [pid 6618] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6621] ioctl(4, LOOP_SET_FD, 3 [pid 6620] close(3 [pid 6619] <... munmap resumed>) = 0 [pid 6618] <... mount resumed>) = 0 [pid 6620] <... close resumed>) = 0 [pid 6618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6622] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6620] close(4 [pid 6618] <... openat resumed>) = 3 [pid 6618] chdir("./file1" [pid 6622] <... openat resumed>) = 4 [pid 6618] <... chdir resumed>) = 0 [pid 6620] <... close resumed>) = 0 [pid 6618] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6618] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6612] <... futex resumed>) = 0 [pid 6618] creat("./file0", 000 [pid 6612] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] mkdir("./file1", 0777 [pid 6618] <... creat resumed>) = 4 [pid 6612] <... futex resumed>) = 0 [pid 6618] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6618] <... futex resumed>) = 0 [pid 6618] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6612] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] ioctl(4, LOOP_SET_FD, 3 [pid 6620] <... mkdir resumed>) = 0 [pid 6619] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6618] <... futex resumed>) = 0 [pid 6612] <... futex resumed>) = 1 [pid 6619] <... openat resumed>) = 4 [pid 6618] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6612] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6622] <... ioctl resumed>) = 0 [ 189.896498][ T6620] loop1: detected capacity change from 0 to 1024 [ 189.926565][ T6621] loop4: detected capacity change from 0 to 1024 [ 189.937996][ T6622] loop2: detected capacity change from 0 to 1024 [pid 6620] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6619] ioctl(4, LOOP_SET_FD, 3 [pid 6622] close(3 [pid 6619] <... ioctl resumed>) = 0 [pid 6622] <... close resumed>) = 0 [pid 6622] close(4 [pid 6619] close(3 [pid 6622] <... close resumed>) = 0 [pid 6619] <... close resumed>) = 0 [pid 6622] mkdir("./file1", 0777 [pid 6619] close(4) = 0 [pid 6623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6622] <... mkdir resumed>) = 0 [pid 6619] mkdir("./file1", 0777 [pid 6622] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6619] <... mkdir resumed>) = 0 [pid 6621] <... ioctl resumed>) = 0 [pid 6619] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6621] close(3) = 0 [pid 6621] close(4) = 0 [ 189.946742][ T6619] loop0: detected capacity change from 0 to 1024 [ 189.947468][ T6618] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6621] mkdir("./file1", 0777 [pid 6620] <... mount resumed>) = 0 [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6621] <... mkdir resumed>) = 0 [pid 6612] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6612] <... futex resumed>) = 0 [pid 6622] <... mount resumed>) = 0 [pid 6620] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6622] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6620] <... openat resumed>) = 3 [pid 6612] <... mmap resumed>) = 0x7eff81e8c000 [ 189.996387][ T6618] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.023312][ T28] audit: type=1800 audit(1708423267.645:510): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [pid 6612] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6623] <... write resumed>) = 524288 [pid 6622] <... openat resumed>) = 3 [pid 6620] chdir("./file1" [pid 6619] <... mount resumed>) = 0 [pid 6612] <... mprotect resumed>) = 0 [pid 6622] chdir("./file1" [pid 6620] <... chdir resumed>) = 0 [pid 6620] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6624]}, 88) = 6624 [pid 6612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6612] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6612] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6624 attached [pid 6623] munmap(0x7eff79a00000, 138412032) = 0 [pid 6624] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6624] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6624] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6623] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6623] ioctl(4, LOOP_SET_FD, 3 [pid 6622] <... chdir resumed>) = 0 [pid 6620] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6619] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6619] chdir("./file1" [pid 6622] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6620] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... chdir resumed>) = 0 [pid 6620] <... futex resumed>) = 1 [pid 6620] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6622] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6619] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6619] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6619] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] <... futex resumed>) = 0 [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6616] <... futex resumed>) = 0 [pid 6615] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6615] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 6619] <... futex resumed>) = 0 [pid 6616] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] creat("./file0", 000 [pid 6619] creat("./file0", 000 [pid 6615] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] <... creat resumed>) = 4 [pid 6621] <... mount resumed>) = 0 [ 190.024752][ T6623] loop3: detected capacity change from 0 to 1024 [ 190.051287][ T6618] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.067936][ T6618] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6621] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6624] <... open resumed>) = 5 [pid 6622] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] <... openat resumed>) = 3 [pid 6620] <... creat resumed>) = 4 [pid 6619] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] chdir("./file1" [pid 6624] <... futex resumed>) = 0 [pid 6621] <... chdir resumed>) = 0 [pid 6621] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6621] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6621] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6624] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] <... futex resumed>) = 1 [pid 6622] <... futex resumed>) = 1 [pid 6614] <... futex resumed>) = 0 [pid 6616] <... futex resumed>) = 0 [pid 6616] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6614] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... futex resumed>) = 1 [pid 6621] <... futex resumed>) = 0 [pid 6622] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6621] creat("./file0", 000 [pid 6619] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 190.093634][ T6618] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6614] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6621] <... creat resumed>) = 4 [pid 6620] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] <... futex resumed>) = 0 [pid 6617] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6621] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... futex resumed>) = 0 [pid 6621] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 1 [pid 6614] <... futex resumed>) = 0 [pid 6614] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] creat("./file0", 000 [pid 6617] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... futex resumed>) = 0 [pid 6621] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6614] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6622] <... creat resumed>) = 4 [pid 6622] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = 0 [pid 6615] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6615] <... futex resumed>) = 0 [pid 6620] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6615] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6617] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6617] <... futex resumed>) = 0 [pid 6617] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6616] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6615] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6614] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... mmap resumed>) = 0x7eff81e8c000 [pid 6615] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6614] <... futex resumed>) = 0 [ 190.136482][ T6618] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.149692][ T6619] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.167173][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6616] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6623] <... ioctl resumed>) = 0 [pid 6618] <... write resumed>) = 53248 [pid 6617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6615] <... mmap resumed>) = 0x7eff81e8c000 [pid 6614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6616] <... mprotect resumed>) = 0 [pid 6618] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] exit_group(0 [pid 6614] <... mmap resumed>) = 0x7eff81e8c000 [pid 6624] <... futex resumed>) = ? [pid 6618] <... futex resumed>) = ? [pid 6617] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6614] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6616] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6612] <... exit_group resumed>) = ? [pid 6624] +++ exited with 0 +++ [pid 6618] +++ exited with 0 +++ [pid 6616] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6614] <... mprotect resumed>) = 0 [pid 6612] +++ exited with 0 +++ [pid 6614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6617] <... futex resumed>) = 0 [pid 6614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6615] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6626 attached [pid 6623] close(3 [pid 6617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6615] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6616] <... clone3 resumed> => {parent_tid=[6625]}, 88) = 6625 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6612, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 190.183750][ T6621] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.191074][ T6621] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.200118][ T6619] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.204001][ T6622] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.221970][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 6625 attached [pid 6626] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6623] <... close resumed>) = 0 [pid 6617] <... mmap resumed>) = 0x7eff81e8c000 [pid 6615] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6614] <... clone3 resumed> => {parent_tid=[6626]}, 88) = 6626 [pid 6616] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6626] <... rseq resumed>) = 0 [pid 6625] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [ 190.230405][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.238048][ T6622] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.245932][ T6621] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.251538][ T6619] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.253868][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.255906][ T6622] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.273504][ T6619] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6623] close(4 [pid 6626] set_robust_list(0x7eff81eac9a0, 24 [pid 6625] <... rseq resumed>) = 0 [pid 6617] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6614] rt_sigprocmask(SIG_SETMASK, [], [pid 6616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... restart_syscall resumed>) = 0 [pid 6625] set_robust_list(0x7eff81eac9a0, 24) = 0 ./strace-static-x86_64: Process 6627 attached [pid 6626] <... set_robust_list resumed>) = 0 [pid 6623] <... close resumed>) = 0 [pid 6617] <... mprotect resumed>) = 0 [pid 6614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6616] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6625] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6614] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6616] <... futex resumed>) = 0 [pid 6617] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6615] <... clone3 resumed> => {parent_tid=[6627]}, 88) = 6627 [pid 6616] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... futex resumed>) = 0 [pid 6627] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6626] rt_sigprocmask(SIG_SETMASK, [], [pid 6623] mkdir("./file1", 0777 [pid 6617] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6615] rt_sigprocmask(SIG_SETMASK, [], [pid 6614] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6627] <... rseq resumed>) = 0 [pid 6626] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6627] set_robust_list(0x7eff81eac9a0, 24 [pid 6626] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 190.277437][ T6621] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.290667][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.298997][ T28] audit: type=1800 audit(1708423267.905:511): pid=6625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 190.322489][ T6620] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6626] <... open resumed>) = 5 [pid 6625] <... open resumed>) = 5 [pid 6615] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6625] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6616] <... futex resumed>) = 0 [pid 6627] <... set_robust_list resumed>) = 0 [pid 6615] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6628 attached [pid 6628] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6627] rt_sigprocmask(SIG_SETMASK, [], [pid 6615] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6614] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] newfstatat(3, "", [pid 6627] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6626] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] <... mkdir resumed>) = 0 [pid 6617] <... clone3 resumed> => {parent_tid=[6628]}, 88) = 6628 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6627] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6626] <... futex resumed>) = 0 [pid 6623] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6617] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] getdents64(3, [ 190.333857][ T28] audit: type=1800 audit(1708423267.955:512): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 190.348423][ T6619] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.354913][ T6621] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.370020][ T6622] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.370839][ T6621] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6628] set_robust_list(0x7eff81eac9a0, 24 [pid 6626] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6628] <... set_robust_list resumed>) = 0 [pid 6627] <... open resumed>) = 5 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6628] rt_sigprocmask(SIG_SETMASK, [], [pid 6621] <... write resumed>) = 53248 [pid 6628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6621] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6621] <... futex resumed>) = 0 [pid 6621] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6627] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] exit_group(0 [pid 5076] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6628] <... futex resumed>) = 0 [pid 6627] <... futex resumed>) = 1 [pid 6626] <... futex resumed>) = ? [pid 6621] <... futex resumed>) = ? [pid 6620] <... write resumed>) = 53248 [pid 6617] <... futex resumed>) = 1 [pid 6615] <... futex resumed>) = 0 [pid 6614] <... exit_group resumed>) = ? [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6627] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6626] +++ exited with 0 +++ [pid 5076] newfstatat(AT_FDCWD, "./85/binderfs", [pid 6617] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6620] <... futex resumed>) = 0 [pid 5076] unlink("./85/binderfs" [ 190.391019][ T28] audit: type=1800 audit(1708423268.005:513): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 190.413355][ T6619] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.419376][ T6622] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6620] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6623] <... mount resumed>) = 0 [pid 6621] +++ exited with 0 +++ [pid 6619] <... write resumed>) = 53248 [pid 6614] +++ exited with 0 +++ [pid 5076] <... unlink resumed>) = 0 [pid 6623] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6619] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] chdir("./file1") = 0 [pid 6619] <... futex resumed>) = 0 [pid 6623] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6619] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6623] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6623] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6615] exit_group(0 [pid 6616] exit_group(0 [pid 6613] <... futex resumed>) = 0 [pid 5076] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6614, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6627] <... futex resumed>) = ? [pid 6620] <... futex resumed>) = ? [pid 6615] <... exit_group resumed>) = ? [pid 6616] <... exit_group resumed>) = ? [pid 6613] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... open resumed>) = 5 [pid 6627] +++ exited with 0 +++ [pid 6625] <... futex resumed>) = ? [pid 6623] <... futex resumed>) = 0 [pid 6622] <... write resumed>) = 53248 [pid 6620] +++ exited with 0 +++ [pid 6619] <... futex resumed>) = ? [pid 6615] +++ exited with 0 +++ [pid 6617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6613] <... futex resumed>) = 1 [pid 6628] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] creat("./file0", 000 [pid 6622] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6617] exit_group(0 [pid 6613] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6615, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6623] <... creat resumed>) = 4 [pid 6622] <... futex resumed>) = ? [pid 6617] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6619] +++ exited with 0 +++ [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 6628] <... futex resumed>) = ? [pid 6623] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... restart_syscall resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6628] +++ exited with 0 +++ [pid 6617] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6623] <... futex resumed>) = 1 [pid 6613] <... futex resumed>) = 0 [pid 5075] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6617, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5072] <... openat resumed>) = 3 [pid 6623] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6613] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 5075] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6613] <... futex resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] getdents64(3, [pid 6613] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] unlink("./84/binderfs" [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] <... unlink resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6625] +++ exited with 0 +++ [pid 6616] +++ exited with 0 +++ [pid 5076] <... umount2 resumed>) = 0 [pid 5075] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6616, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5073] getdents64(3, [pid 5072] unlink("./84/binderfs" [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5073] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 190.442141][ T28] audit: type=1800 audit(1708423268.055:514): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 190.444606][ T6622] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] newfstatat(AT_FDCWD, "./85/file1", [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5072] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] unlink("./84/binderfs" [pid 5072] newfstatat(AT_FDCWD, "./84/file1", [pid 5071] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] <... unlink resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(3, "", [pid 5076] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] getdents64(3, [pid 5072] <... openat resumed>) = 4 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] newfstatat(4, "", [pid 5071] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] newfstatat(AT_FDCWD, "./84/file1", [pid 5073] <... umount2 resumed>) = 0 [pid 5071] unlink("./86/binderfs" [pid 6613] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... openat resumed>) = 4 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] getdents64(4, [pid 6613] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(4, "", [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... unlink resumed>) = 0 [ 190.519306][ T6623] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.531320][ T6623] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.540585][ T6623] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.548194][ T6623] hfsplus: request for non-existent node 16777216 in B*Tree [ 190.558983][ T6623] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5073] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6623] <... write resumed>) = 53248 [pid 6613] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(4 [pid 5071] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6623] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] getdents64(4, [pid 5075] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./84/file1", [pid 5072] <... close resumed>) = 0 [pid 6623] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 6623] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6613] <... mmap resumed>) = 0x7eff81e8c000 [pid 5072] rmdir("./84/file1" [pid 6613] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5073] umount2("./84/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6613] <... mprotect resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./84/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6613] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] getdents64(4, [pid 5075] newfstatat(4, "", [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 6613] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 6613] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] close(4 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6629 attached [pid 5076] <... close resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(4, "", [pid 5072] close(3 [pid 5071] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6629] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6613] <... clone3 resumed> => {parent_tid=[6629]}, 88) = 6629 [pid 5076] rmdir("./85/file1" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(4, [pid 5073] getdents64(4, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] newfstatat(AT_FDCWD, "./86/file1", [pid 5075] getdents64(4, [pid 5073] getdents64(4, [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6613] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6629] <... rseq resumed>) = 0 [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] getdents64(3, [pid 5075] close(4 [pid 5073] close(4 [pid 5072] <... close resumed>) = 0 [pid 6629] set_robust_list(0x7eff81eac9a0, 24 [pid 6613] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] rmdir("./84" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6629] <... set_robust_list resumed>) = 0 [pid 6613] <... futex resumed>) = 0 [pid 5076] close(3 [pid 5075] rmdir("./84/file1" [pid 5073] rmdir("./84/file1" [pid 5071] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6629] rt_sigprocmask(SIG_SETMASK, [], [pid 6613] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5076] rmdir("./85" [pid 6629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] mkdir("./85", 0777 [pid 6629] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5076] <... rmdir resumed>) = 0 [pid 5075] getdents64(3, [pid 5073] getdents64(3, [ 190.567691][ T6623] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] newfstatat(4, "", [pid 5076] mkdir("./86", 0777 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6629] <... open resumed>) = 5 [pid 5076] <... mkdir resumed>) = 0 [pid 5075] close(3 [pid 5073] close(3 [pid 5071] getdents64(4, [pid 5075] <... close resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5075] rmdir("./84" [pid 5073] rmdir("./84" [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 5075] mkdir("./85", 0777) = 0 [pid 5073] mkdir("./85", 0777) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6629] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6629] <... futex resumed>) = 1 [pid 6613] <... futex resumed>) = 0 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6629] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6613] exit_group(0 [pid 5071] getdents64(4, [pid 6629] <... futex resumed>) = ? [pid 6623] <... futex resumed>) = ? [pid 6613] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6623] +++ exited with 0 +++ [pid 6629] +++ exited with 0 +++ [pid 5071] close(4) = 0 [pid 5071] rmdir("./86/file1" [pid 5076] <... ioctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5071] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(3) = 0 [ 190.628908][ T28] audit: type=1800 audit(1708423268.245:515): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5071] rmdir("./86") = 0 [pid 5071] mkdir("./87", 0777 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6613] +++ exited with 0 +++ [pid 5075] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5073] close(3 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6613, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5073] <... close resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6630 [pid 5075] close(3./strace-static-x86_64: Process 6630 attached ) = 0 [pid 6630] set_robust_list(0x5555571ca6a0, 24 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6631 [pid 6630] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6631 attached [pid 6630] chdir("./86" [pid 5074] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6630] <... chdir resumed>) = 0 [pid 6630] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... openat resumed>) = 3 [pid 6630] <... prctl resumed>) = 0 [pid 6631] set_robust_list(0x5555571ca6a0, 24 [pid 6630] setpgid(0, 0 [pid 5074] newfstatat(3, "", [pid 6631] <... set_robust_list resumed>) = 0 [pid 6630] <... setpgid resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6631] chdir("./85" [pid 6630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] getdents64(3, [pid 6631] <... chdir resumed>) = 0 [pid 6630] <... openat resumed>) = 3 [pid 5072] <... ioctl resumed>) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6632 [pid 6630] write(3, "1000", 4./strace-static-x86_64: Process 6632 attached ) = 4 [pid 6632] set_robust_list(0x5555571ca6a0, 24 [pid 6630] close(3) = 0 [pid 6631] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6630] symlink("/dev/binderfs", "./binderfs" [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] close(3 [pid 6632] <... set_robust_list resumed>) = 0 [pid 6631] <... prctl resumed>) = 0 [pid 5074] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... close resumed>) = 0 [pid 6631] setpgid(0, 0 [pid 6630] <... symlink resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6631] <... setpgid resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./85/binderfs", [pid 6632] chdir("./85" [pid 6630] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] <... chdir resumed>) = 0 [pid 6631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6631] <... openat resumed>) = 3 [pid 6630] <... futex resumed>) = 0 [pid 5074] unlink("./85/binderfs" [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6633 [pid 6632] <... prctl resumed>) = 0 [pid 6631] write(3, "1000", 4 [pid 6630] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5074] <... unlink resumed>) = 0 [pid 6632] setpgid(0, 0 [pid 6631] <... write resumed>) = 4 [pid 6630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] close(3 [pid 6630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6633 attached [pid 6632] <... setpgid resumed>) = 0 [pid 6630] <... mmap resumed>) = 0x7eff81ead000 [pid 6631] <... close resumed>) = 0 [pid 6633] set_robust_list(0x5555571ca6a0, 24 [pid 6632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6631] symlink("/dev/binderfs", "./binderfs" [pid 6633] <... set_robust_list resumed>) = 0 [pid 6632] <... openat resumed>) = 3 [pid 6630] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6633] chdir("./85" [pid 6632] write(3, "1000", 4 [pid 6631] <... symlink resumed>) = 0 [pid 6630] <... mprotect resumed>) = 0 [pid 6633] <... chdir resumed>) = 0 [pid 6632] <... write resumed>) = 4 [pid 6630] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6632] close(3 [pid 6631] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6633] <... prctl resumed>) = 0 [pid 6632] <... close resumed>) = 0 [pid 6631] <... futex resumed>) = 0 [pid 6630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5071] <... ioctl resumed>) = 0 [pid 6633] setpgid(0, 0 [pid 6632] symlink("/dev/binderfs", "./binderfs" [pid 6631] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, ./strace-static-x86_64: Process 6634 attached [pid 6633] <... setpgid resumed>) = 0 [pid 6632] <... symlink resumed>) = 0 [pid 6631] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5071] close(3 [pid 6634] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6630] <... clone3 resumed> => {parent_tid=[6634]}, 88) = 6634 [pid 5071] <... close resumed>) = 0 [pid 6634] <... rseq resumed>) = 0 [pid 6633] <... openat resumed>) = 3 [pid 6632] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6630] rt_sigprocmask(SIG_SETMASK, [], [pid 6634] set_robust_list(0x7eff81ecd9a0, 24 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6634] <... set_robust_list resumed>) = 0 [pid 6633] write(3, "1000", 4 [pid 6632] <... futex resumed>) = 0 [pid 6631] <... mmap resumed>) = 0x7eff81ead000 [pid 6630] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6634] rt_sigprocmask(SIG_SETMASK, [], [pid 6632] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6631] <... mprotect resumed>) = 0 [pid 6630] <... futex resumed>) = 0 [pid 6634] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6632] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6631] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6630] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6634] memfd_create("syzkaller", 0 [pid 6633] <... write resumed>) = 4 [pid 6632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6631] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6635 attached [pid 6634] <... memfd_create resumed>) = 3 [pid 6633] close(3 [pid 6632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6635] set_robust_list(0x5555571ca6a0, 24 [pid 6634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6633] <... close resumed>) = 0 [pid 6632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6635] <... set_robust_list resumed>) = 0 [pid 6634] <... mmap resumed>) = 0x7eff79a00000 [pid 6633] symlink("/dev/binderfs", "./binderfs" [pid 6632] <... mmap resumed>) = 0x7eff81ead000 [pid 6631] <... clone3 resumed> => {parent_tid=[6636]}, 88) = 6636 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6635 [pid 6635] chdir("./87" [pid 6634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6633] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6636 attached [pid 6631] rt_sigprocmask(SIG_SETMASK, [], [pid 6636] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6635] <... chdir resumed>) = 0 [pid 6632] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6636] <... rseq resumed>) = 0 [pid 6632] <... mprotect resumed>) = 0 [pid 6632] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6636] set_robust_list(0x7eff81ecd9a0, 24 [pid 5074] <... umount2 resumed>) = 0 [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6636] <... set_robust_list resumed>) = 0 [pid 6631] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6636] rt_sigprocmask(SIG_SETMASK, [], [pid 6631] <... futex resumed>) = 0 [pid 6636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6633] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6631] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6636] memfd_create("syzkaller", 0 [pid 6635] <... prctl resumed>) = 0 [pid 6633] <... futex resumed>) = 0 [pid 6632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6636] <... memfd_create resumed>) = 3 [pid 6635] setpgid(0, 0 [pid 6633] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, ./strace-static-x86_64: Process 6637 attached [pid 6636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6635] <... setpgid resumed>) = 0 [pid 6633] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6632] <... clone3 resumed> => {parent_tid=[6637]}, 88) = 6637 [pid 6637] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6636] <... mmap resumed>) = 0x7eff79a00000 [pid 6635] <... openat resumed>) = 3 [pid 6633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6632] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6637] <... rseq resumed>) = 0 [pid 6635] write(3, "1000", 4 [pid 6633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6632] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6637] set_robust_list(0x7eff81ecd9a0, 24 [pid 6633] <... mmap resumed>) = 0x7eff81ead000 [pid 6632] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... set_robust_list resumed>) = 0 [pid 6635] <... write resumed>) = 4 [pid 6633] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6632] <... futex resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./85/file1", [pid 6637] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] close(3 [pid 6633] <... mprotect resumed>) = 0 [pid 6632] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6637] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] <... close resumed>) = 0 [pid 6633] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6637] memfd_create("syzkaller", 0 [pid 6635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6633] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6637] <... memfd_create resumed>) = 3 [pid 6635] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6633] <... clone3 resumed> => {parent_tid=[6638]}, 88) = 6638 [pid 6633] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6638 attached NULL, 8) = 0 [pid 6638] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6635] <... futex resumed>) = 0 [pid 6633] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... rseq resumed>) = 0 [pid 6637] <... mmap resumed>) = 0x7eff79a00000 [pid 6635] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6633] <... futex resumed>) = 0 [pid 5074] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6638] set_robust_list(0x7eff81ecd9a0, 24 [pid 6637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6635] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6633] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6638] <... set_robust_list resumed>) = 0 [pid 6638] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6634] <... write resumed>) = 524288 [pid 6638] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6638] memfd_create("syzkaller", 0 [pid 6635] <... mmap resumed>) = 0x7eff81ead000 [pid 6638] <... memfd_create resumed>) = 3 [pid 6635] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6634] munmap(0x7eff79a00000, 138412032 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6635] <... mprotect resumed>) = 0 [pid 6634] <... munmap resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6638] <... mmap resumed>) = 0x7eff79a00000 [pid 6635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5074] <... openat resumed>) = 4 [pid 6635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6634] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6634] <... openat resumed>) = 4 [pid 6634] ioctl(4, LOOP_SET_FD, 3 [pid 5074] newfstatat(4, "", ./strace-static-x86_64: Process 6639 attached [pid 6636] <... write resumed>) = 524288 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, [pid 6639] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6635] <... clone3 resumed> => {parent_tid=[6639]}, 88) = 6639 [pid 6639] <... rseq resumed>) = 0 [pid 6635] rt_sigprocmask(SIG_SETMASK, [], [pid 6639] set_robust_list(0x7eff81ecd9a0, 24 [pid 6637] <... write resumed>) = 524288 [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6639] <... set_robust_list resumed>) = 0 [pid 6635] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(4, [pid 6636] munmap(0x7eff79a00000, 138412032 [pid 6639] rt_sigprocmask(SIG_SETMASK, [], [pid 6636] <... munmap resumed>) = 0 [pid 6635] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4 [pid 6639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6639] memfd_create("syzkaller", 0) = 3 [pid 6639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 5074] <... close resumed>) = 0 [ 190.884178][ T6634] loop5: detected capacity change from 0 to 1024 [pid 5074] rmdir("./85/file1") = 0 [pid 6636] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6634] <... ioctl resumed>) = 0 [pid 6634] close(3) = 0 [pid 6634] close(4) = 0 [pid 6636] <... openat resumed>) = 4 [pid 6634] mkdir("./file1", 0777 [pid 5074] getdents64(3, [pid 6637] munmap(0x7eff79a00000, 138412032 [pid 6634] <... mkdir resumed>) = 0 [pid 6639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6637] <... munmap resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6636] ioctl(4, LOOP_SET_FD, 3 [pid 6634] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6637] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6637] ioctl(4, LOOP_SET_FD, 3 [pid 5074] close(3 [pid 6639] <... write resumed>) = 524288 [pid 5074] <... close resumed>) = 0 [pid 5074] rmdir("./85") = 0 [pid 6638] <... write resumed>) = 524288 [pid 6636] <... ioctl resumed>) = 0 [pid 6634] <... mount resumed>) = 0 [pid 5074] mkdir("./86", 0777 [pid 6639] munmap(0x7eff79a00000, 138412032 [pid 6638] munmap(0x7eff79a00000, 138412032 [pid 6637] <... ioctl resumed>) = 0 [pid 6636] close(3 [pid 6634] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6639] <... munmap resumed>) = 0 [pid 6638] <... munmap resumed>) = 0 [pid 6637] close(3 [pid 6636] <... close resumed>) = 0 [pid 6634] <... openat resumed>) = 3 [pid 5074] <... mkdir resumed>) = 0 [pid 6636] close(4 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6638] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6636] <... close resumed>) = 0 [pid 6634] chdir("./file1" [pid 6638] <... openat resumed>) = 4 [pid 6637] <... close resumed>) = 0 [pid 6636] mkdir("./file1", 0777 [pid 6634] <... chdir resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 6639] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6637] close(4 [pid 6634] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6639] <... openat resumed>) = 4 [pid 6637] <... close resumed>) = 0 [pid 6636] <... mkdir resumed>) = 0 [pid 6634] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6639] ioctl(4, LOOP_SET_FD, 3 [pid 6638] ioctl(4, LOOP_SET_FD, 3 [pid 6637] mkdir("./file1", 0777 [ 190.927466][ T6636] loop2: detected capacity change from 0 to 1024 [ 190.935305][ T6637] loop4: detected capacity change from 0 to 1024 [pid 6634] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... mkdir resumed>) = 0 [pid 6636] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6634] <... futex resumed>) = 1 [pid 6630] <... futex resumed>) = 0 [pid 6634] creat("./file0", 000 [pid 6630] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] <... creat resumed>) = 4 [pid 6630] <... futex resumed>) = 0 [pid 6630] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6634] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6634] <... futex resumed>) = 1 [pid 6630] <... futex resumed>) = 0 [pid 6634] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6630] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6630] <... futex resumed>) = 0 [pid 6634] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6630] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] <... ioctl resumed>) = 0 [pid 6638] <... ioctl resumed>) = 0 [pid 6636] <... mount resumed>) = 0 [pid 6639] close(3 [pid 6638] close(3 [pid 6639] <... close resumed>) = 0 [pid 6638] <... close resumed>) = 0 [pid 6637] <... mount resumed>) = 0 [ 190.982350][ T6639] loop0: detected capacity change from 0 to 1024 [ 190.982546][ T6638] loop1: detected capacity change from 0 to 1024 [pid 6636] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6639] close(4 [pid 6638] close(4 [pid 6637] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6636] <... openat resumed>) = 3 [pid 6637] <... openat resumed>) = 3 [pid 6637] chdir("./file1" [pid 6638] <... close resumed>) = 0 [pid 6638] mkdir("./file1", 0777) = 0 [pid 6639] <... close resumed>) = 0 [pid 6638] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6637] <... chdir resumed>) = 0 [pid 6637] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6639] mkdir("./file1", 0777 [pid 6637] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... mkdir resumed>) = 0 [pid 6637] <... futex resumed>) = 1 [pid 6632] <... futex resumed>) = 0 [pid 6639] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6637] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6632] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6636] chdir("./file1" [pid 6632] <... futex resumed>) = 0 [pid 5074] <... ioctl resumed>) = 0 [pid 6636] <... chdir resumed>) = 0 [pid 5074] close(3 [pid 6636] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5074] <... close resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6636] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6637] creat("./file0", 000 [pid 6632] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6637] <... creat resumed>) = 4 [ 191.032205][ T6634] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.039563][ T6634] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.067967][ T6634] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6636] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6636] <... futex resumed>) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6630] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6640 ./strace-static-x86_64: Process 6640 attached [pid 6631] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... mount resumed>) = 0 [pid 6638] <... mount resumed>) = 0 [pid 6636] creat("./file0", 000 [pid 6639] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6637] <... futex resumed>) = 1 [pid 6632] <... futex resumed>) = 0 [pid 6631] <... futex resumed>) = 0 [pid 6630] <... futex resumed>) = 0 [pid 6639] <... openat resumed>) = 3 [pid 6637] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6632] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6639] chdir("./file1" [pid 6631] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... mmap resumed>) = 0x7eff81e8c000 [pid 6640] set_robust_list(0x5555571ca6a0, 24 [pid 6639] <... chdir resumed>) = 0 [pid 6638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6636] <... creat resumed>) = 4 [pid 6632] <... futex resumed>) = 0 [pid 6630] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6639] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6632] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] <... mprotect resumed>) = 0 [pid 6639] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6637] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6630] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6640] <... set_robust_list resumed>) = 0 [pid 6639] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] <... openat resumed>) = 3 [pid 6636] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6640] chdir("./86" [pid 6639] <... futex resumed>) = 1 [pid 6638] chdir("./file1" [pid 6636] <... futex resumed>) = 1 [pid 6635] <... futex resumed>) = 0 [pid 6631] <... futex resumed>) = 0 [pid 6630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6641 attached [pid 6639] creat("./file0", 000 [pid 6635] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6639] <... creat resumed>) = 4 [pid 6635] <... futex resumed>) = 0 [pid 6641] <... rseq resumed>) = 0 [pid 6640] <... chdir resumed>) = 0 [pid 6638] <... chdir resumed>) = 0 [pid 6636] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6635] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6631] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] set_robust_list(0x7eff81eac9a0, 24 [pid 6640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6639] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6631] <... futex resumed>) = 0 [pid 6630] <... clone3 resumed> => {parent_tid=[6641]}, 88) = 6641 [pid 6641] <... set_robust_list resumed>) = 0 [pid 6640] <... prctl resumed>) = 0 [pid 6639] <... futex resumed>) = 1 [pid 6638] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6635] <... futex resumed>) = 0 [pid 6631] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6630] rt_sigprocmask(SIG_SETMASK, [], [pid 6641] rt_sigprocmask(SIG_SETMASK, [], [pid 6640] setpgid(0, 0 [pid 6639] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6635] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] <... futex resumed>) = 0 [pid 6641] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6635] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6639] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6630] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... futex resumed>) = 0 [pid 6630] <... futex resumed>) = 1 [pid 6641] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6630] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] <... setpgid resumed>) = 0 [pid 6638] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6638] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6640] <... openat resumed>) = 3 [pid 6633] <... futex resumed>) = 0 [ 191.077068][ T6634] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.090690][ T6634] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.109791][ T6636] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.118571][ T6637] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6640] write(3, "1000", 4) = 4 [pid 6633] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] close(3 [pid 6638] <... futex resumed>) = 0 [pid 6633] <... futex resumed>) = 1 [pid 6640] <... close resumed>) = 0 [pid 6638] creat("./file0", 000 [pid 6640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6638] <... creat resumed>) = 4 [pid 6633] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6640] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6638] <... futex resumed>) = 0 [pid 6640] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6638] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6632] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6633] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] <... futex resumed>) = 0 [ 191.131642][ T6636] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.135809][ T6639] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.150034][ T6637] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.162166][ T6634] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6635] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6633] <... futex resumed>) = 0 [pid 6632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6638] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6635] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6633] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] <... mmap resumed>) = 0x7eff81e8c000 [pid 6631] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6630] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6632] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6635] <... futex resumed>) = 0 [pid 6632] <... mprotect resumed>) = 0 [pid 6635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6632] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6635] <... mmap resumed>) = 0x7eff81e8c000 [pid 6632] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6631] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... mmap resumed>) = 0x7eff81ead000 [pid 6635] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6631] <... futex resumed>) = 0 [pid 6640] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6635] <... mprotect resumed>) = 0 [pid 6632] <... clone3 resumed> => {parent_tid=[6642]}, 88) = 6642 [pid 6632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6632] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6632] <... futex resumed>) = 0 [pid 6635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6632] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6640] <... mprotect resumed>) = 0 [pid 6631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6635] <... clone3 resumed> => {parent_tid=[6643]}, 88) = 6643 ./strace-static-x86_64: Process 6642 attached [pid 6642] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6635] rt_sigprocmask(SIG_SETMASK, [], [pid 6642] <... rseq resumed>) = 0 [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6642] set_robust_list(0x7eff81eac9a0, 24 [pid 6635] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] <... set_robust_list resumed>) = 0 [pid 6635] <... futex resumed>) = 0 [pid 6642] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6642] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6640] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6631] <... mmap resumed>) = 0x7eff81e8c000 [pid 6642] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6640] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6631] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [ 191.165568][ T28] audit: type=1800 audit(1708423268.745:516): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 191.172653][ T6636] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.205260][ T6638] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.212948][ T6639] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.221452][ T6637] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6644 attached ./strace-static-x86_64: Process 6643 attached => {parent_tid=[6644]}, 88) = 6644 [pid 6634] <... write resumed>) = 53248 [pid 6631] <... mprotect resumed>) = 0 [pid 6643] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], [pid 6634] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6633] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6631] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6633] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6641] <... open resumed>) = 5 [pid 6633] <... mmap resumed>) = 0x7eff81e8c000 [pid 6641] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6633] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6630] exit_group(0 [pid 6643] <... rseq resumed>) = 0 [pid 6641] <... futex resumed>) = ? [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6634] <... futex resumed>) = ? [pid 6633] <... mprotect resumed>) = 0 [pid 6631] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6630] <... exit_group resumed>) = ? [pid 6644] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6643] set_robust_list(0x7eff81eac9a0, 24 [pid 6641] +++ exited with 0 +++ [pid 6640] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] +++ exited with 0 +++ [pid 6633] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6630] +++ exited with 0 +++ [pid 6632] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6633] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6630, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6644] <... rseq resumed>) = 0 [pid 6643] <... set_robust_list resumed>) = 0 [pid 6640] <... futex resumed>) = 0 [pid 6635] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6646 attached [pid 6646] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6633] <... clone3 resumed> => {parent_tid=[6646]}, 88) = 6646 [pid 6646] <... rseq resumed>) = 0 [pid 6633] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6645 attached [pid 6646] set_robust_list(0x7eff81eac9a0, 24 [ 191.237192][ T6639] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.244962][ T6637] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.252862][ T6638] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.261014][ T6638] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.269202][ T6639] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6646] <... set_robust_list resumed>) = 0 [pid 6645] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6644] set_robust_list(0x7eff81ecd9a0, 24 [pid 6643] rt_sigprocmask(SIG_SETMASK, [], [pid 6642] <... open resumed>) = 5 [pid 6640] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6633] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] <... clone3 resumed> => {parent_tid=[6645]}, 88) = 6645 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6642] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6633] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6642] <... futex resumed>) = 0 [pid 6642] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6633] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... openat resumed>) = 3 [pid 6644] <... set_robust_list resumed>) = 0 [pid 6643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] newfstatat(3, "", [pid 6646] rt_sigprocmask(SIG_SETMASK, [], [pid 6645] <... rseq resumed>) = 0 [pid 6644] rt_sigprocmask(SIG_SETMASK, [], [pid 6643] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6645] set_robust_list(0x7eff81eac9a0, 24 [pid 6644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6631] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 6646] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6645] <... set_robust_list resumed>) = 0 [pid 6645] rt_sigprocmask(SIG_SETMASK, [], [pid 6644] memfd_create("syzkaller", 0 [pid 6631] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6644] <... memfd_create resumed>) = 3 [pid 6631] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6645] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./86/binderfs" [pid 6644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] <... unlink resumed>) = 0 [pid 6644] <... mmap resumed>) = 0x7eff79a00000 [pid 6643] <... open resumed>) = 5 [pid 5076] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 191.277310][ T28] audit: type=1800 audit(1708423268.835:517): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 191.280029][ T6637] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.319853][ T6638] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6643] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6645] <... open resumed>) = 5 [pid 6633] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6645] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6631] <... futex resumed>) = 0 [pid 6643] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... umount2 resumed>) = 0 [pid 6646] <... open resumed>) = 5 [pid 6646] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6646] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6644] <... write resumed>) = 524288 [pid 5076] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6644] munmap(0x7eff79a00000, 138412032 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./86/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 191.352311][ T6636] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.361427][ T6639] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.385738][ T6638] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.393684][ T6639] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6644] <... munmap resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, [pid 6644] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6644] <... openat resumed>) = 4 [pid 5076] <... close resumed>) = 0 [pid 6644] ioctl(4, LOOP_SET_FD, 3 [pid 5076] rmdir("./86/file1") = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [ 191.403760][ T6638] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.408652][ T28] audit: type=1800 audit(1708423268.935:518): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 191.411440][ T6636] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.442347][ T6644] loop3: detected capacity change from 0 to 1024 [pid 5076] close(3) = 0 [pid 5076] rmdir("./86") = 0 [pid 6644] <... ioctl resumed>) = 0 [pid 5076] mkdir("./87", 0777) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6644] close(3 [pid 6638] <... write resumed>) = 53248 [pid 6639] <... write resumed>) = 53248 [pid 6639] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6638] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... futex resumed>) = 0 [pid 6638] <... futex resumed>) = 0 [pid 6644] <... close resumed>) = 0 [pid 6639] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6638] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6637] <... write resumed>) = 53248 [pid 6644] close(4 [pid 6637] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] exit_group(0 [pid 6633] exit_group(0 [pid 6632] exit_group(0 [pid 6646] <... futex resumed>) = ? [ 191.446671][ T6637] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6644] <... close resumed>) = 0 [pid 6643] <... futex resumed>) = ? [pid 6642] <... futex resumed>) = ? [pid 6639] <... futex resumed>) = ? [pid 6638] <... futex resumed>) = ? [pid 6637] <... futex resumed>) = ? [pid 6635] <... exit_group resumed>) = ? [pid 6633] <... exit_group resumed>) = ? [pid 6632] <... exit_group resumed>) = ? [pid 6646] +++ exited with 0 +++ [pid 6642] +++ exited with 0 +++ [pid 6637] +++ exited with 0 +++ [pid 6632] +++ exited with 0 +++ [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6632, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5075] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6643] +++ exited with 0 +++ [pid 5075] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6638] +++ exited with 0 +++ [pid 6633] +++ exited with 0 +++ [pid 5075] <... openat resumed>) = 3 [pid 5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6633, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6644] mkdir("./file1", 0777 [pid 6639] +++ exited with 0 +++ [pid 6635] +++ exited with 0 +++ [pid 6636] <... write resumed>) = 53248 [pid 5075] getdents64(3, [pid 6644] <... mkdir resumed>) = 0 [pid 6636] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6644] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6631] exit_group(0 [pid 6636] <... futex resumed>) = ? [pid 6631] <... exit_group resumed>) = ? [ 191.491894][ T6636] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] close(3 [pid 5075] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6645] <... futex resumed>) = ? [pid 6636] +++ exited with 0 +++ [pid 5072] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6635, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6645] +++ exited with 0 +++ [pid 6631] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6631, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5072] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 5071] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] unlink("./85/binderfs" [pid 5071] newfstatat(3, "", [pid 5072] getdents64(3, [pid 5075] <... unlink resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6644] <... mount resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] newfstatat(3, "", [pid 5072] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5071] unlink("./87/binderfs" [pid 6644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6647 attached [pid 6644] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6647 [pid 5075] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5072] unlink("./85/binderfs" [pid 5071] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] set_robust_list(0x5555571ca6a0, 24 [pid 6644] chdir("./file1" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6647] <... set_robust_list resumed>) = 0 [pid 6644] <... chdir resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./85/file1", [pid 6647] chdir("./87" [pid 6644] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] <... chdir resumed>) = 0 [pid 6644] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5075] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6644] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6644] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] newfstatat(AT_FDCWD, "./85/binderfs", [pid 6647] <... prctl resumed>) = 0 [pid 6644] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6640] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 4 [pid 5072] <... unlink resumed>) = 0 [pid 6647] setpgid(0, 0 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6640] <... futex resumed>) = 0 [pid 5075] newfstatat(4, "", [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] <... setpgid resumed>) = 0 [pid 6644] creat("./file0", 000 [pid 6640] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] unlink("./85/binderfs" [pid 6647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6644] <... creat resumed>) = 4 [pid 5075] getdents64(4, [pid 6644] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6647] <... openat resumed>) = 3 [pid 6644] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] <... unlink resumed>) = 0 [pid 6644] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6640] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] write(3, "1000", 4 [pid 6644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6640] <... futex resumed>) = 0 [pid 5075] close(4 [pid 6647] <... write resumed>) = 4 [pid 6644] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6640] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... close resumed>) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 6647] close(3) = 0 [pid 6647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6647] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = 0 [pid 6647] <... futex resumed>) = 0 [pid 5075] rmdir("./85/file1" [pid 6647] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5075] <... rmdir resumed>) = 0 [pid 6647] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6647] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 5075] getdents64(3, [pid 6647] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./85/file1", [pid 5071] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 6647] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] <... close resumed>) = 0 [pid 5073] newfstatat(AT_FDCWD, "./85/file1", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6647] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] rmdir("./85" [pid 6647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./87/file1", [pid 6640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6640] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6647] <... clone3 resumed> => {parent_tid=[6648]}, 88) = 6648 [pid 6640] <... futex resumed>) = 0 [pid 5073] umount2("./85/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6647] rt_sigprocmask(SIG_SETMASK, [], [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] mkdir("./86", 0777 [pid 5072] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6640] <... mmap resumed>) = 0x7eff81e8c000 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 191.614219][ T6644] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.621550][ T6644] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.634645][ T6644] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.643968][ T6644] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.655310][ T6644] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6647] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./85/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6648 attached [pid 6647] <... futex resumed>) = 0 [pid 6640] <... mprotect resumed>) = 0 [pid 5072] newfstatat(4, "", [pid 6640] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6647] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6640] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5075] <... openat resumed>) = 3 [pid 5073] newfstatat(4, "", [pid 5072] getdents64(4, [pid 6640] <... clone3 resumed> => {parent_tid=[6649]}, 88) = 6649 [pid 5071] newfstatat(4, "", [pid 6648] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6649 attached [pid 6648] <... rseq resumed>) = 0 [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6649] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6648] set_robust_list(0x7eff81ecd9a0, 24 [pid 6644] <... write resumed>) = 53248 [pid 6640] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6649] <... rseq resumed>) = 0 [pid 6640] <... futex resumed>) = 0 [pid 5073] getdents64(4, [pid 5072] getdents64(4, [pid 5071] getdents64(4, [pid 6649] set_robust_list(0x7eff81eac9a0, 24 [pid 6648] <... set_robust_list resumed>) = 0 [pid 6644] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6649] <... set_robust_list resumed>) = 0 [pid 6648] rt_sigprocmask(SIG_SETMASK, [], [pid 6644] <... futex resumed>) = 0 [pid 5072] close(4 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 6649] rt_sigprocmask(SIG_SETMASK, [], [pid 6648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6644] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6648] memfd_create("syzkaller", 0 [pid 5073] close(4 [pid 5072] rmdir("./85/file1" [pid 5071] getdents64(4, [pid 6649] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6648] <... memfd_create resumed>) = 3 [pid 5073] <... close resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6649] <... open resumed>) = 5 [pid 6648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5073] rmdir("./85/file1" [pid 5072] getdents64(3, [pid 5071] close(4 [pid 6649] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] <... mmap resumed>) = 0x7eff79a00000 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] <... close resumed>) = 0 [pid 6649] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = 0 [pid 5072] close(3 [pid 5071] rmdir("./87/file1" [pid 6649] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] <... close resumed>) = 0 [pid 5071] getdents64(3, [pid 6648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6640] exit_group(0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] rmdir("./85" [pid 6649] <... futex resumed>) = ? [pid 6644] <... futex resumed>) = ? [pid 6640] <... exit_group resumed>) = ? [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6649] +++ exited with 0 +++ [pid 5073] close(3 [pid 5071] close(3 [pid 6644] +++ exited with 0 +++ [pid 6640] +++ exited with 0 +++ [pid 5073] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6640, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5073] rmdir("./85") = 0 [pid 5073] mkdir("./86", 0777 [pid 6648] <... write resumed>) = 524288 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] rmdir("./87" [pid 6648] munmap(0x7eff79a00000, 138412032 [pid 5074] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... mkdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", [pid 6648] <... munmap resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 191.666324][ T6644] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6648] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] getdents64(3, [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6648] <... openat resumed>) = 4 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 5074] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] mkdir("./86", 0777 [pid 5071] mkdir("./88", 0777 [pid 6648] ioctl(4, LOOP_SET_FD, 3 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... openat resumed>) = 3 [pid 5074] unlink("./86/binderfs" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5074] <... unlink resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5074] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... ioctl resumed>) = 0 [pid 5075] close(3 [pid 6648] <... ioctl resumed>) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6648] close(3 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] <... close resumed>) = 0 ./strace-static-x86_64: Process 6650 attached [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6650 [pid 6650] set_robust_list(0x5555571ca6a0, 24 [pid 6648] close(4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6650] <... set_robust_list resumed>) = 0 [pid 5074] newfstatat(AT_FDCWD, "./86/file1", [pid 5072] <... ioctl resumed>) = 0 [pid 6650] chdir("./86" [pid 6648] <... close resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6650] <... chdir resumed>) = 0 [pid 5074] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6650] <... prctl resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6650] setpgid(0, 0 [pid 5074] <... openat resumed>) = 4 [pid 6650] <... setpgid resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 6650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6650] <... openat resumed>) = 3 [pid 6648] mkdir("./file1", 0777 [pid 5074] getdents64(4, [pid 5072] close(3 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... close resumed>) = 0 [pid 5074] close(4 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6650] write(3, "1000", 4 [pid 6648] <... mkdir resumed>) = 0 [pid 5074] <... close resumed>) = 0 [ 191.736778][ T6648] loop5: detected capacity change from 0 to 1024 [pid 6648] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6650] <... write resumed>) = 4 [pid 5074] rmdir("./86/file1" [pid 5071] <... ioctl resumed>) = 0 [pid 6650] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6650] <... close resumed>) = 0 [pid 6650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] getdents64(3, [pid 6650] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6650] <... futex resumed>) = 0 [pid 6650] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5074] close(3./strace-static-x86_64: Process 6651 attached [pid 6650] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6651 [pid 5071] close(3 [pid 6651] set_robust_list(0x5555571ca6a0, 24 [pid 6650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5074] <... close resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 6651] <... set_robust_list resumed>) = 0 [pid 6650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] rmdir("./86" [pid 5071] <... close resumed>) = 0 [pid 6651] chdir("./86" [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5073] close(3 [pid 6651] <... chdir resumed>) = 0 [pid 6650] <... mmap resumed>) = 0x7eff81ead000 [pid 6648] <... mount resumed>) = 0 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6648] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6650] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6651] <... prctl resumed>) = 0 [pid 5074] mkdir("./87", 0777 [pid 6650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5074] <... mkdir resumed>) = 0 [pid 6651] setpgid(0, 0) = 0 [pid 6650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6648] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6654 attached [pid 6651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6654] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6651] <... openat resumed>) = 3 [pid 6650] <... clone3 resumed> => {parent_tid=[6654]}, 88) = 6654 [pid 6648] chdir("./file1" [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6654] <... rseq resumed>) = 0 [pid 6651] write(3, "1000", 4 [pid 6650] rt_sigprocmask(SIG_SETMASK, [], [pid 6648] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6652 attached [pid 6654] set_robust_list(0x7eff81ecd9a0, 24 [pid 6651] <... write resumed>) = 4 [pid 6650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6648] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6653 attached [pid 6651] close(3 [pid 6650] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... close resumed>) = 0 [pid 6648] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6653 [pid 6653] set_robust_list(0x5555571ca6a0, 24 [pid 6651] symlink("/dev/binderfs", "./binderfs" [pid 6648] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6652 [pid 6648] <... futex resumed>) = 1 [pid 6654] <... set_robust_list resumed>) = 0 [pid 6651] <... symlink resumed>) = 0 [pid 6650] <... futex resumed>) = 0 [pid 6648] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6653] <... set_robust_list resumed>) = 0 [pid 6652] set_robust_list(0x5555571ca6a0, 24 [pid 6647] <... futex resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6652] <... set_robust_list resumed>) = 0 [pid 6654] rt_sigprocmask(SIG_SETMASK, [], [pid 6650] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6647] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] chdir("./86" [pid 6652] chdir("./88" [pid 6654] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6651] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] <... futex resumed>) = 0 [pid 6647] <... futex resumed>) = 1 [pid 6653] <... chdir resumed>) = 0 [pid 6652] <... chdir resumed>) = 0 [pid 6654] memfd_create("syzkaller", 0 [pid 6651] <... futex resumed>) = 0 [pid 6648] creat("./file0", 000 [pid 6647] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6654] <... memfd_create resumed>) = 3 [pid 6651] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6648] <... creat resumed>) = 4 [pid 6653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6652] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6651] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6653] <... prctl resumed>) = 0 [pid 6652] <... prctl resumed>) = 0 [pid 6651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6653] setpgid(0, 0 [pid 6654] <... mmap resumed>) = 0x7eff79a00000 [pid 6651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] setpgid(0, 0 [pid 6648] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6653] <... setpgid resumed>) = 0 [pid 6652] <... setpgid resumed>) = 0 [pid 6651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6648] <... futex resumed>) = 1 [pid 6647] <... futex resumed>) = 0 [pid 6648] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6647] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6647] <... futex resumed>) = 0 [pid 6648] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6647] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6651] <... mmap resumed>) = 0x7eff81ead000 [pid 6653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6652] <... openat resumed>) = 3 [pid 5074] <... ioctl resumed>) = 0 [pid 6654] <... write resumed>) = 524288 [pid 6653] <... openat resumed>) = 3 [pid 6651] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6652] write(3, "1000", 4 [pid 6654] munmap(0x7eff79a00000, 138412032 [pid 6651] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6653] write(3, "1000", 4) = 4 [pid 6652] <... write resumed>) = 4 [pid 6654] <... munmap resumed>) = 0 [pid 6651] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6653] close(3 [pid 6652] close(3 [pid 6654] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6652] <... close resumed>) = 0 [pid 6654] <... openat resumed>) = 4 [pid 6654] ioctl(4, LOOP_SET_FD, 3 [pid 6653] <... close resumed>) = 0 [pid 6652] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6655 attached [pid 6653] symlink("/dev/binderfs", "./binderfs" [pid 6647] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6655] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6653] <... symlink resumed>) = 0 [pid 6652] <... symlink resumed>) = 0 [pid 6651] <... clone3 resumed> => {parent_tid=[6655]}, 88) = 6655 [pid 6647] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] close(3 [pid 6651] rt_sigprocmask(SIG_SETMASK, [], [pid 6647] <... futex resumed>) = 0 [pid 6655] <... rseq resumed>) = 0 [pid 6653] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6655] set_robust_list(0x7eff81ecd9a0, 24 [pid 6653] <... futex resumed>) = 0 [pid 6652] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6647] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] <... close resumed>) = 0 [pid 6655] <... set_robust_list resumed>) = 0 [pid 6652] <... futex resumed>) = 0 [pid 6651] <... futex resumed>) = 0 [pid 6647] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6651] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6655] rt_sigprocmask(SIG_SETMASK, [], [pid 6652] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6647] <... mprotect resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6653] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6655] memfd_create("syzkaller", 0 [pid 6653] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6652] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6647] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6655] <... memfd_create resumed>) = 3 [pid 6653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6647] <... rt_sigprocmask resumed>[], 8) = 0 [ 191.870785][ T6648] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.882756][ T6648] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.900368][ T6648] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.905784][ T6654] loop4: detected capacity change from 0 to 1024 [pid 6655] <... mmap resumed>) = 0x7eff79a00000 [pid 6653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6656 ./strace-static-x86_64: Process 6656 attached [pid 6656] set_robust_list(0x5555571ca6a0, 24./strace-static-x86_64: Process 6657 attached ) = 0 [pid 6653] <... mmap resumed>) = 0x7eff81ead000 [pid 6652] <... mmap resumed>) = 0x7eff81ead000 [pid 6657] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6656] chdir("./87" [pid 6653] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6654] <... ioctl resumed>) = 0 [pid 6647] <... clone3 resumed> => {parent_tid=[6657]}, 88) = 6657 [pid 6657] <... rseq resumed>) = 0 [pid 6656] <... chdir resumed>) = 0 [pid 6654] close(3 [pid 6657] set_robust_list(0x7eff81eac9a0, 24 [pid 6656] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6653] <... mprotect resumed>) = 0 [pid 6647] rt_sigprocmask(SIG_SETMASK, [], [pid 6657] <... set_robust_list resumed>) = 0 [pid 6656] <... prctl resumed>) = 0 [pid 6654] <... close resumed>) = 0 [pid 6653] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6647] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6657] rt_sigprocmask(SIG_SETMASK, [], [pid 6656] setpgid(0, 0 [pid 6654] close(4 [pid 6647] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] <... setpgid resumed>) = 0 [pid 6653] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6652] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6654] <... close resumed>) = 0 [pid 6647] <... futex resumed>) = 0 [pid 6657] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6652] <... mprotect resumed>) = 0 [pid 6654] mkdir("./file1", 0777 [pid 6647] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6658 attached [pid 6657] <... open resumed>) = 5 [pid 6656] <... openat resumed>) = 3 [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6654] <... mkdir resumed>) = 0 [pid 6658] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6657] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... clone3 resumed> => {parent_tid=[6658]}, 88) = 6658 [pid 6658] <... rseq resumed>) = 0 [pid 6657] <... futex resumed>) = 1 [pid 6656] write(3, "1000", 4 [pid 6653] rt_sigprocmask(SIG_SETMASK, [], [pid 6647] <... futex resumed>) = 0 [pid 6658] set_robust_list(0x7eff81ecd9a0, 24 [pid 6657] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6656] <... write resumed>) = 4 [pid 6653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6654] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6658] <... set_robust_list resumed>) = 0 [pid 6656] close(3 [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6656] <... close resumed>) = 0 ./strace-static-x86_64: Process 6659 attached [pid 6656] symlink("/dev/binderfs", "./binderfs" [pid 6659] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6656] <... symlink resumed>) = 0 [pid 6652] <... clone3 resumed> => {parent_tid=[6659]}, 88) = 6659 [pid 6658] rt_sigprocmask(SIG_SETMASK, [], [pid 6653] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... rseq resumed>) = 0 [pid 6658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... futex resumed>) = 0 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], [pid 6659] set_robust_list(0x7eff81ecd9a0, 24 [pid 6658] memfd_create("syzkaller", 0 [pid 6656] <... futex resumed>) = 0 [pid 6653] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6654] <... mount resumed>) = 0 [pid 6659] <... set_robust_list resumed>) = 0 [pid 6656] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6652] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6659] rt_sigprocmask(SIG_SETMASK, [], [pid 6658] <... memfd_create resumed>) = 3 [pid 6656] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6652] <... futex resumed>) = 0 [pid 6654] <... openat resumed>) = 3 [pid 6659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6652] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6654] chdir("./file1" [pid 6659] memfd_create("syzkaller", 0 [pid 6658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6654] <... chdir resumed>) = 0 [pid 6656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6654] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6659] <... memfd_create resumed>) = 3 [pid 6658] <... mmap resumed>) = 0x7eff79a00000 [pid 6656] <... mmap resumed>) = 0x7eff81ead000 [pid 6654] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6656] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6654] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... mmap resumed>) = 0x7eff79a00000 [pid 6654] <... futex resumed>) = 1 [pid 6650] <... futex resumed>) = 0 [pid 6658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6656] <... mprotect resumed>) = 0 [pid 6655] <... write resumed>) = 524288 [pid 6654] creat("./file0", 000 [pid 6650] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] <... creat resumed>) = 4 [pid 6650] <... futex resumed>) = 0 [pid 6650] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 191.933650][ T6648] hfsplus: request for non-existent node 16777216 in B*Tree [ 191.968364][ T6648] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6660 attached [pid 6659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6656] <... clone3 resumed> => {parent_tid=[6660]}, 88) = 6660 [pid 6654] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6654] <... futex resumed>) = 1 [pid 6650] <... futex resumed>) = 0 [pid 6660] <... rseq resumed>) = 0 [pid 6656] rt_sigprocmask(SIG_SETMASK, [], [pid 6654] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] set_robust_list(0x7eff81ecd9a0, 24 [pid 6656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6654] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6650] <... futex resumed>) = 0 [pid 6660] <... set_robust_list resumed>) = 0 [pid 6650] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6660] rt_sigprocmask(SIG_SETMASK, [], [pid 6656] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] munmap(0x7eff79a00000, 138412032 [pid 6654] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] <... futex resumed>) = 0 [pid 6660] memfd_create("syzkaller", 0 [pid 6656] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6655] <... munmap resumed>) = 0 [ 192.012190][ T6648] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.044377][ T6654] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.051702][ T6654] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6655] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6660] <... memfd_create resumed>) = 3 [pid 6658] <... write resumed>) = 524288 [pid 6655] <... openat resumed>) = 4 [pid 6648] <... write resumed>) = 53248 [pid 6659] <... write resumed>) = 524288 [pid 6648] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6647] exit_group(0 [pid 6648] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6657] <... futex resumed>) = ? [pid 6648] <... futex resumed>) = ? [pid 6647] <... exit_group resumed>) = ? [pid 6648] +++ exited with 0 +++ [pid 6657] +++ exited with 0 +++ [pid 6660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6655] ioctl(4, LOOP_SET_FD, 3 [pid 6660] <... mmap resumed>) = 0x7eff79a00000 [pid 6650] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6659] munmap(0x7eff79a00000, 138412032 [pid 6650] <... futex resumed>) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6650] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6647] +++ exited with 0 +++ [pid 6650] <... mprotect resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6647, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6650] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6659] <... munmap resumed>) = 0 [pid 6650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5076] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6661 attached [pid 6659] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5076] newfstatat(3, "", [pid 6661] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6659] <... openat resumed>) = 4 [pid 6650] <... clone3 resumed> => {parent_tid=[6661]}, 88) = 6661 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6661] <... rseq resumed>) = 0 [pid 6650] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] getdents64(3, [pid 6650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6661] set_robust_list(0x7eff81eac9a0, 24 [pid 6659] ioctl(4, LOOP_SET_FD, 3 [pid 6658] munmap(0x7eff79a00000, 138412032 [pid 6650] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6659] <... ioctl resumed>) = 0 [pid 6658] <... munmap resumed>) = 0 [pid 6655] <... ioctl resumed>) = 0 [pid 6650] <... futex resumed>) = 0 [pid 5076] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6658] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6655] close(3) = 0 [ 192.074857][ T6655] loop1: detected capacity change from 0 to 1024 [ 192.114172][ T6659] loop0: detected capacity change from 0 to 1024 [pid 6661] <... set_robust_list resumed>) = 0 [pid 6658] <... openat resumed>) = 4 [pid 6655] close(4 [pid 6650] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6661] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] unlink("./87/binderfs" [pid 6661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] <... write resumed>) = 524288 [pid 5076] <... unlink resumed>) = 0 [pid 6661] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5076] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6658] ioctl(4, LOOP_SET_FD, 3 [pid 6655] <... close resumed>) = 0 [pid 6655] mkdir("./file1", 0777 [pid 6660] munmap(0x7eff79a00000, 138412032) = 0 [pid 6660] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6655] <... mkdir resumed>) = 0 [pid 6655] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6660] <... openat resumed>) = 4 [pid 6658] <... ioctl resumed>) = 0 [pid 6658] close(3) = 0 [ 192.122728][ T6654] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.131564][ T6658] loop2: detected capacity change from 0 to 1024 [pid 6658] close(4 [pid 6660] ioctl(4, LOOP_SET_FD, 3 [pid 6659] close(3 [pid 6658] <... close resumed>) = 0 [pid 6659] <... close resumed>) = 0 [pid 6650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5076] <... umount2 resumed>) = 0 [pid 6659] close(4 [pid 6658] mkdir("./file1", 0777 [pid 5076] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6659] <... close resumed>) = 0 [pid 6655] <... mount resumed>) = 0 [pid 6659] mkdir("./file1", 0777 [pid 6658] <... mkdir resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6655] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] newfstatat(AT_FDCWD, "./87/file1", [pid 6659] <... mkdir resumed>) = 0 [pid 6655] <... openat resumed>) = 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6655] chdir("./file1" [pid 6659] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "") = 0 [pid 6658] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6655] <... chdir resumed>) = 0 [pid 5076] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6661] <... open resumed>) = 5 [pid 6659] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6661] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... openat resumed>) = 3 [pid 6655] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6661] <... futex resumed>) = 0 [pid 6660] <... ioctl resumed>) = 0 [pid 6659] chdir("./file1" [pid 6661] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] close(3 [pid 6659] <... chdir resumed>) = 0 [pid 6655] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6660] <... close resumed>) = 0 [pid 6659] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 192.170509][ T6660] loop3: detected capacity change from 0 to 1024 [ 192.178118][ T6654] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6655] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] close(4 [pid 6659] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6655] <... futex resumed>) = 1 [pid 6651] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6660] <... close resumed>) = 0 [pid 6659] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] creat("./file0", 000 [pid 6651] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] mkdir("./file1", 0777 [pid 6659] <... futex resumed>) = 1 [pid 6652] <... futex resumed>) = 0 [pid 6659] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] <... mkdir resumed>) = 0 [pid 6659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] <... futex resumed>) = 0 [pid 6659] creat("./file0", 000 [pid 6652] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6651] <... futex resumed>) = 0 [pid 6660] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6659] <... creat resumed>) = 4 [pid 6655] <... creat resumed>) = 4 [pid 6651] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6659] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 6659] <... futex resumed>) = 1 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6659] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] getdents64(4, [pid 6652] <... futex resumed>) = 0 [pid 6652] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... futex resumed>) = 0 [pid 6652] <... futex resumed>) = 1 [pid 6659] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6658] <... mount resumed>) = 0 [pid 6655] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [ 192.220235][ T6654] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.256950][ T6654] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6655] <... futex resumed>) = 1 [pid 6651] <... futex resumed>) = 0 [pid 5076] close(4 [pid 6658] chdir("./file1" [pid 6655] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6651] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] <... chdir resumed>) = 0 [pid 6655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6651] <... futex resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6658] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6655] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6651] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] rmdir("./87/file1" [pid 6660] <... mount resumed>) = 0 [pid 6658] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... rmdir resumed>) = 0 [pid 6658] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 6658] <... futex resumed>) = 1 [pid 6653] <... futex resumed>) = 0 [pid 6658] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6653] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6653] <... futex resumed>) = 0 [pid 5076] close(3 [pid 6658] creat("./file0", 000 [pid 6653] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... close resumed>) = 0 [pid 6660] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6654] <... write resumed>) = 53248 [pid 5076] rmdir("./87" [pid 6660] <... openat resumed>) = 3 [pid 6654] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] chdir("./file1" [pid 6654] <... futex resumed>) = 0 [pid 6654] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] <... chdir resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6660] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6650] exit_group(0 [pid 6658] <... creat resumed>) = 4 [pid 6661] <... futex resumed>) = ? [pid 6660] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6654] <... futex resumed>) = ? [pid 6650] <... exit_group resumed>) = ? [pid 6660] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] +++ exited with 0 +++ [pid 6658] <... futex resumed>) = 1 [pid 6653] <... futex resumed>) = 0 [pid 5076] mkdir("./88", 0777 [pid 6660] <... futex resumed>) = 1 [pid 6656] <... futex resumed>) = 0 [pid 6652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 192.267361][ T6659] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6660] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6658] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6656] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... mkdir resumed>) = 0 [pid 6660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6656] <... futex resumed>) = 0 [pid 6652] <... futex resumed>) = 0 [pid 6660] creat("./file0", 000 [pid 6656] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] <... futex resumed>) = 0 [pid 6652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6661] +++ exited with 0 +++ [pid 6660] <... creat resumed>) = 4 [pid 6653] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6652] <... mmap resumed>) = 0x7eff81e8c000 [pid 6651] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6650] +++ exited with 0 +++ [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6660] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6651] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] <... futex resumed>) = 1 [pid 6656] <... futex resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6650, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6660] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6656] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... mprotect resumed>) = 0 [pid 6656] <... futex resumed>) = 0 [pid 6652] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6656] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6652] <... rt_sigprocmask resumed>[], 8) = 0 [ 192.316566][ T6655] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.331794][ T6659] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.340983][ T6658] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.350439][ T6655] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6662 attached [pid 6651] <... futex resumed>) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6662] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6652] <... clone3 resumed> => {parent_tid=[6662]}, 88) = 6662 [pid 6651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6662] <... rseq resumed>) = 0 [pid 6662] set_robust_list(0x7eff81eac9a0, 24 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], [pid 6651] <... mmap resumed>) = 0x7eff81e8c000 [pid 6652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6652] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6662] <... set_robust_list resumed>) = 0 [pid 6653] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6651] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6662] rt_sigprocmask(SIG_SETMASK, [], [pid 6653] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] <... mprotect resumed>) = 0 [pid 6656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6651] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6653] <... futex resumed>) = 0 [pid 5075] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6651] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6653] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6656] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6656] <... futex resumed>) = 0 [pid 6656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6656] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6664]}, 88) = 6664 [pid 6656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6656] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... ioctl resumed>) = 0 [pid 5075] newfstatat(3, "", [pid 6656] <... futex resumed>) = 0 [pid 6656] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6663 attached [ 192.364569][ T6660] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.371892][ T6660] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.373982][ T6658] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.388407][ T6655] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.394433][ T6659] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.402531][ T6655] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 6664 attached [pid 6663] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6651] <... clone3 resumed> => {parent_tid=[6663]}, 88) = 6663 [pid 5075] getdents64(3, [pid 6651] rt_sigprocmask(SIG_SETMASK, [], [pid 6664] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6663] <... rseq resumed>) = 0 [pid 6662] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6653] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6652] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6651] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] <... rseq resumed>) = 0 [pid 6663] set_robust_list(0x7eff81eac9a0, 24 [pid 6653] <... mprotect resumed>) = 0 [pid 6651] <... futex resumed>) = 0 [pid 5075] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6664] set_robust_list(0x7eff81eac9a0, 24 [pid 6663] <... set_robust_list resumed>) = 0 [pid 6664] <... set_robust_list resumed>) = 0 [pid 6663] rt_sigprocmask(SIG_SETMASK, [], [pid 6651] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6653] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] newfstatat(AT_FDCWD, "./86/binderfs", [pid 6664] rt_sigprocmask(SIG_SETMASK, [], [pid 6663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6653] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6663] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] unlink("./86/binderfs" [pid 6664] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000./strace-static-x86_64: Process 6665 attached [pid 6663] <... open resumed>) = 5 [pid 5076] close(3 [pid 5075] <... unlink resumed>) = 0 [pid 6665] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6663] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... clone3 resumed> => {parent_tid=[6665]}, 88) = 6665 [pid 6665] <... rseq resumed>) = 0 [pid 6663] <... futex resumed>) = 1 [pid 6651] <... futex resumed>) = 0 [pid 6665] set_robust_list(0x7eff81eac9a0, 24 [pid 6663] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6665] <... set_robust_list resumed>) = 0 [pid 6653] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... close resumed>) = 0 [pid 5075] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6665] rt_sigprocmask(SIG_SETMASK, [], [pid 6653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6665] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6653] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [ 192.427140][ T6659] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.451658][ T6660] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.464114][ T6655] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6665] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6656] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6653] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6666 attached [pid 6666] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6666] chdir("./88") = 0 [pid 6666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6666] setpgid(0, 0) = 0 [pid 6653] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6666 [pid 6666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6666] write(3, "1000", 4) = 4 [pid 6666] close(3) = 0 [pid 6666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6666] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6666] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6655] <... write resumed>) = 53248 [pid 6666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6655] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6655] <... futex resumed>) = 0 [pid 6666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6665] <... open resumed>) = 5 [pid 6664] <... open resumed>) = 5 [pid 6655] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] <... mmap resumed>) = 0x7eff81ead000 [ 192.470192][ T6659] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.479596][ T6658] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.485481][ T6660] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.490100][ T6655] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.507820][ T6659] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.507982][ T6658] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6665] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] exit_group(0 [pid 6666] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6665] <... futex resumed>) = 1 [pid 6664] <... futex resumed>) = 0 [pid 6653] <... futex resumed>) = 0 [pid 6666] <... mprotect resumed>) = 0 [pid 6662] <... open resumed>) = 5 [pid 6655] <... futex resumed>) = ? [pid 6651] <... exit_group resumed>) = ? [pid 6666] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6664] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6662] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] +++ exited with 0 +++ [pid 6662] <... futex resumed>) = 0 [pid 6666] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6665] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6663] <... futex resumed>) = ? [pid 6662] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6659] <... write resumed>) = 53248 [pid 6663] +++ exited with 0 +++ [pid 6659] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] +++ exited with 0 +++ [pid 6659] <... futex resumed>) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6651, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- ./strace-static-x86_64: Process 6667 attached [pid 6666] <... clone3 resumed> => {parent_tid=[6667]}, 88) = 6667 [pid 6659] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6667] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6666] rt_sigprocmask(SIG_SETMASK, [], [pid 6652] exit_group(0 [pid 6667] <... rseq resumed>) = 0 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6662] <... futex resumed>) = ? [pid 6659] <... futex resumed>) = ? [pid 6652] <... exit_group resumed>) = ? [pid 5075] <... umount2 resumed>) = 0 [pid 6667] set_robust_list(0x7eff81ecd9a0, 24 [pid 6666] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6662] +++ exited with 0 +++ [pid 6659] +++ exited with 0 +++ [pid 6652] +++ exited with 0 +++ [pid 6666] <... futex resumed>) = 0 [pid 6666] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6667] <... set_robust_list resumed>) = 0 [pid 5075] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6652, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6660] <... write resumed>) = 53248 [pid 6667] rt_sigprocmask(SIG_SETMASK, [], [pid 6658] <... write resumed>) = 53248 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] exit_group(0 [pid 6664] <... futex resumed>) = ? [ 192.537111][ T6660] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.565067][ T6658] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.571869][ T6660] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.576328][ T6658] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6660] <... futex resumed>) = ? [pid 6658] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6656] <... exit_group resumed>) = ? [pid 5075] newfstatat(AT_FDCWD, "./86/file1", [pid 5072] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6667] memfd_create("syzkaller", 0) = 3 [pid 6664] +++ exited with 0 +++ [pid 6660] +++ exited with 0 +++ [pid 6658] <... futex resumed>) = 0 [pid 6667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6658] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6667] <... mmap resumed>) = 0x7eff79a00000 [pid 6656] +++ exited with 0 +++ [pid 5072] <... openat resumed>) = 3 [pid 5072] newfstatat(3, "", [pid 6653] exit_group(0 [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6656, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6665] <... futex resumed>) = ? [pid 6653] <... exit_group resumed>) = ? [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6665] +++ exited with 0 +++ [pid 6658] <... futex resumed>) = ? [pid 5071] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5075] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] newfstatat(3, "", [pid 5074] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] unlink("./86/binderfs" [pid 5074] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... openat resumed>) = 4 [pid 5071] getdents64(3, [pid 6658] +++ exited with 0 +++ [pid 6653] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", [pid 5074] <... openat resumed>) = 3 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] newfstatat(3, "", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6653, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5072] <... unlink resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] <... write resumed>) = 524288 [pid 5075] getdents64(4, [pid 5074] getdents64(3, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6667] munmap(0x7eff79a00000, 138412032 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6667] <... munmap resumed>) = 0 [pid 5075] getdents64(4, [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] unlink("./88/binderfs" [pid 6667] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5075] close(4 [pid 5074] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 6667] ioctl(4, LOOP_SET_FD, 3 [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6667] <... ioctl resumed>) = 0 [pid 5075] rmdir("./86/file1" [pid 5074] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5073] getdents64(3, [pid 5072] newfstatat(AT_FDCWD, "./86/file1", [pid 5075] <... rmdir resumed>) = 0 [pid 6667] close(3 [pid 5071] <... umount2 resumed>) = 0 [pid 6667] <... close resumed>) = 0 [pid 5071] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6667] close(4 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] <... close resumed>) = 0 [pid 5075] getdents64(3, [pid 5074] unlink("./87/binderfs" [pid 5073] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] newfstatat(AT_FDCWD, "./88/file1", [pid 6667] mkdir("./file1", 0777 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(3 [pid 5074] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] <... mkdir resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] rmdir("./86" [pid 5073] unlink("./86/binderfs" [pid 5072] <... openat resumed>) = 4 [pid 5071] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6667] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] getdents64(4, [pid 5071] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] mkdir("./87", 0777 [pid 5071] <... openat resumed>) = 4 [pid 5072] getdents64(4, [pid 5071] newfstatat(4, "", [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] close(4) = 0 [pid 5071] getdents64(4, [pid 5072] rmdir("./86/file1" [pid 6667] <... mount resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6667] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] getdents64(4, [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(3, [pid 6667] chdir("./file1" [pid 5074] <... umount2 resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6667] <... chdir resumed>) = 0 [pid 6667] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 6667] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5072] close(3 [pid 5071] <... close resumed>) = 0 [pid 6667] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] <... futex resumed>) = 1 [pid 5074] newfstatat(AT_FDCWD, "./87/file1", [pid 5071] rmdir("./88/file1" [pid 6667] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... close resumed>) = 0 [pid 6666] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... rmdir resumed>) = 0 [pid 6667] <... futex resumed>) = 0 [pid 6666] <... futex resumed>) = 1 [pid 5074] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] rmdir("./86" [pid 5071] getdents64(3, [pid 6667] creat("./file0", 000 [ 192.638893][ T6667] loop5: detected capacity change from 0 to 1024 [pid 6666] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6667] <... creat resumed>) = 4 [pid 5074] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] mkdir("./87", 0777 [pid 5071] close(3 [pid 5072] <... mkdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5073] <... umount2 resumed>) = 0 [pid 6667] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... openat resumed>) = 4 [pid 5071] <... close resumed>) = 0 [pid 6667] <... futex resumed>) = 1 [pid 6666] <... futex resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5073] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] rmdir("./88" [pid 6667] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./86/file1", [pid 6667] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6666] <... futex resumed>) = 0 [pid 5074] getdents64(4, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6667] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6666] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] mkdir("./89", 0777 [pid 5074] getdents64(4, [pid 5073] umount2("./86/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5074] close(4 [pid 5073] openat(AT_FDCWD, "./86/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5074] rmdir("./87/file1") = 0 [pid 5071] <... openat resumed>) = 3 [pid 5074] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] newfstatat(4, "", [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, [pid 5074] close(3 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] <... close resumed>) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./86/file1") = 0 [pid 5073] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] rmdir("./87" [pid 5073] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5074] mkdir("./88", 0777 [pid 5073] rmdir("./86" [pid 5074] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5073] mkdir("./87", 0777 [pid 5075] <... ioctl resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... mkdir resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5075] close(3) = 0 [pid 6666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... ioctl resumed>) = 0 [pid 6666] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] close(3) = 0 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6666] <... futex resumed>) = 0 [pid 6666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6668 ./strace-static-x86_64: Process 6668 attached [pid 6668] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6668] chdir("./87" [pid 5071] <... ioctl resumed>) = 0 [pid 6666] <... mmap resumed>) = 0x7eff81e8c000 ./strace-static-x86_64: Process 6669 attached [pid 6668] <... chdir resumed>) = 0 [pid 6666] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6669 [pid 6669] set_robust_list(0x5555571ca6a0, 24 [pid 6666] <... mprotect resumed>) = 0 [pid 6669] <... set_robust_list resumed>) = 0 [pid 6668] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6669] chdir("./87" [pid 6668] <... prctl resumed>) = 0 [pid 6668] setpgid(0, 0) = 0 [pid 6668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6666] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6669] <... chdir resumed>) = 0 [pid 6666] <... rt_sigprocmask resumed>[], 8) = 0 [ 192.738112][ T6667] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.764480][ T6667] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6668] <... openat resumed>) = 3 [pid 6666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5071] close(3 [pid 6669] setpgid(0, 0 [pid 6668] write(3, "1000", 4 [pid 6669] <... setpgid resumed>) = 0 [pid 6668] <... write resumed>) = 4 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6668] close(3) = 0 [pid 6668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6669] <... openat resumed>) = 3 [pid 6668] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] write(3, "1000", 4 [pid 6668] <... futex resumed>) = 0 [pid 6668] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5071] <... close resumed>) = 0 ./strace-static-x86_64: Process 6670 attached [pid 6669] <... write resumed>) = 4 [pid 6668] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6666] <... clone3 resumed> => {parent_tid=[6670]}, 88) = 6670 [pid 5074] <... ioctl resumed>) = 0 [pid 6668] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6669] close(3 [pid 6668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] <... close resumed>) = 0 [pid 6668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6669] symlink("/dev/binderfs", "./binderfs" [pid 6668] <... mmap resumed>) = 0x7eff81ead000 [pid 6669] <... symlink resumed>) = 0 [pid 6668] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6670] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6669] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6666] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] close(3 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6670] <... rseq resumed>) = 0 [pid 6669] <... futex resumed>) = 0 [pid 6668] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... close resumed>) = 0 [pid 6670] set_robust_list(0x7eff81eac9a0, 24 [pid 6669] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6666] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6666] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6671 attached [pid 6670] <... set_robust_list resumed>) = 0 [pid 6669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6671] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6670] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6668] <... clone3 resumed> => {parent_tid=[6671]}, 88) = 6671 [pid 6666] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6671] <... rseq resumed>) = 0 [pid 6670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6668] rt_sigprocmask(SIG_SETMASK, [], [pid 6671] set_robust_list(0x7eff81ecd9a0, 24 [pid 6669] <... mmap resumed>) = 0x7eff81ead000 [pid 6668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6671] <... set_robust_list resumed>) = 0 [pid 6670] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6668] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6672 [pid 6671] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6668] <... futex resumed>) = 0 [pid 6671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] <... mprotect resumed>) = 0 [ 192.815400][ T6667] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.825553][ T6667] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6668] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6672 attached [pid 6671] memfd_create("syzkaller", 0 [pid 6670] <... open resumed>) = 5 [pid 5073] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6673 attached [pid 6672] set_robust_list(0x5555571ca6a0, 24 [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6673 [pid 6673] set_robust_list(0x5555571ca6a0, 24 [pid 6669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6673] <... set_robust_list resumed>) = 0 [pid 6671] <... memfd_create resumed>) = 3 [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6673] chdir("./88" [pid 6672] <... set_robust_list resumed>) = 0 [pid 6671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6670] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] <... chdir resumed>) = 0 [pid 6671] <... mmap resumed>) = 0x7eff79a00000 [pid 6669] <... clone3 resumed> => {parent_tid=[6674]}, 88) = 6674 [pid 6670] <... futex resumed>) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6672] chdir("./89" [pid 6670] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6674 attached [pid 6673] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6672] <... chdir resumed>) = 0 [pid 6671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6669] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] close(3) = 0 [pid 6674] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6673] <... prctl resumed>) = 0 [pid 6672] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6674] <... rseq resumed>) = 0 [pid 6673] setpgid(0, 0 [pid 6669] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] set_robust_list(0x7eff81ecd9a0, 24 [pid 6673] <... setpgid resumed>) = 0 [pid 6669] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6675 attached [pid 6674] <... set_robust_list resumed>) = 0 [pid 6672] <... prctl resumed>) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6675 [pid 6674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6672] setpgid(0, 0 [pid 6674] memfd_create("syzkaller", 0 [pid 6673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6672] <... setpgid resumed>) = 0 [pid 6669] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6675] set_robust_list(0x5555571ca6a0, 24 [pid 6674] <... memfd_create resumed>) = 3 [pid 6673] <... openat resumed>) = 3 [pid 6672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6675] <... set_robust_list resumed>) = 0 [pid 6674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6673] write(3, "1000", 4 [pid 6672] <... openat resumed>) = 3 [pid 6667] <... write resumed>) = 53248 [pid 6675] chdir("./87" [pid 6667] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] <... chdir resumed>) = 0 [pid 6674] <... mmap resumed>) = 0x7eff79a00000 [pid 6673] <... write resumed>) = 4 [pid 6672] write(3, "1000", 4 [pid 6667] <... futex resumed>) = 0 [pid 6675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6673] close(3 [pid 6672] <... write resumed>) = 4 [pid 6667] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] exit_group(0 [pid 6675] <... prctl resumed>) = 0 [pid 6673] <... close resumed>) = 0 [pid 6672] close(3 [pid 6670] <... futex resumed>) = ? [pid 6667] <... futex resumed>) = ? [pid 6666] <... exit_group resumed>) = ? [pid 6675] setpgid(0, 0 [ 192.874876][ T6667] hfsplus: request for non-existent node 16777216 in B*Tree [ 192.892431][ T6667] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6673] symlink("/dev/binderfs", "./binderfs" [pid 6672] <... close resumed>) = 0 [pid 6670] +++ exited with 0 +++ [pid 6675] <... setpgid resumed>) = 0 [pid 6674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6673] <... symlink resumed>) = 0 [pid 6672] symlink("/dev/binderfs", "./binderfs" [pid 6671] <... write resumed>) = 524288 [pid 6667] +++ exited with 0 +++ [pid 6666] +++ exited with 0 +++ [pid 6675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6673] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] <... symlink resumed>) = 0 [pid 6673] <... futex resumed>) = 0 [pid 6673] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6672] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6666, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6673] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6672] <... futex resumed>) = 0 [pid 5076] restart_syscall(<... resuming interrupted clone ...> [pid 6673] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6675] <... openat resumed>) = 3 [pid 6673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6672] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... restart_syscall resumed>) = 0 [pid 6673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6672] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6675] write(3, "1000", 4 [pid 6673] <... mmap resumed>) = 0x7eff81ead000 [pid 6672] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6675] <... write resumed>) = 4 [pid 6673] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6675] close(3 [pid 6672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6675] <... close resumed>) = 0 [pid 6675] symlink("/dev/binderfs", "./binderfs" [pid 6674] <... write resumed>) = 524288 [pid 6673] <... mprotect resumed>) = 0 [pid 6672] <... mmap resumed>) = 0x7eff81ead000 [pid 6671] munmap(0x7eff79a00000, 138412032 [pid 5076] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6675] <... symlink resumed>) = 0 [pid 6674] munmap(0x7eff79a00000, 138412032 [pid 6673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6672] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6671] <... munmap resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6675] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] <... munmap resumed>) = 0 [pid 6673] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6672] <... mprotect resumed>) = 0 [pid 6671] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5076] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6675] <... futex resumed>) = 0 [pid 6674] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6672] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6676 attached [pid 6675] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6674] <... openat resumed>) = 4 [pid 6672] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6671] <... openat resumed>) = 4 [pid 5076] newfstatat(3, "", [pid 6676] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6675] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6674] ioctl(4, LOOP_SET_FD, 3 [pid 6673] <... clone3 resumed> => {parent_tid=[6676]}, 88) = 6676 [pid 6672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6671] ioctl(4, LOOP_SET_FD, 3 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6676] <... rseq resumed>) = 0 [pid 6675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6673] rt_sigprocmask(SIG_SETMASK, [], [pid 6671] <... ioctl resumed>) = 0 [pid 5076] getdents64(3, [pid 6673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6673] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6673] <... futex resumed>) = 0 [pid 5076] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./88/binderfs" [pid 6672] <... clone3 resumed> => {parent_tid=[6677]}, 88) = 6677 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6676] set_robust_list(0x7eff81ecd9a0, 24 [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6672] rt_sigprocmask(SIG_SETMASK, [], [pid 6676] <... set_robust_list resumed>) = 0 [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6676] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6677 attached NULL, 8) = 0 [pid 6675] <... mmap resumed>) = 0x7eff81ead000 [pid 6672] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6677] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6677] memfd_create("syzkaller", 0) = 3 [pid 6677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6676] memfd_create("syzkaller", 0 [pid 6675] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6672] <... futex resumed>) = 0 [pid 6677] <... mmap resumed>) = 0x7eff79a00000 [pid 6676] <... memfd_create resumed>) = 3 [pid 6675] <... mprotect resumed>) = 0 [pid 6672] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6671] close(3 [pid 6677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6671] <... close resumed>) = 0 [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6675] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6671] close(4 [pid 5076] <... umount2 resumed>) = 0 [ 192.973938][ T6671] loop4: detected capacity change from 0 to 1024 [ 192.975188][ T6674] loop1: detected capacity change from 0 to 1024 [pid 6676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6671] <... close resumed>) = 0 [pid 6671] mkdir("./file1", 0777 [pid 6675] <... clone3 resumed> => {parent_tid=[6678]}, 88) = 6678 [pid 6675] rt_sigprocmask(SIG_SETMASK, [], [pid 6671] <... mkdir resumed>) = 0 [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6675] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6674] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6678 attached [pid 6675] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6674] close(3 [pid 6671] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./88/file1", [pid 6674] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6678] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6674] close(4 [pid 6678] set_robust_list(0x7eff81ecd9a0, 24 [pid 6674] <... close resumed>) = 0 [pid 5076] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6678] <... set_robust_list resumed>) = 0 [pid 6674] mkdir("./file1", 0777 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6678] rt_sigprocmask(SIG_SETMASK, [], [pid 6674] <... mkdir resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6674] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6678] memfd_create("syzkaller", 0 [pid 5076] newfstatat(4, "", [pid 6677] <... write resumed>) = 524288 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6678] <... memfd_create resumed>) = 3 [pid 6676] <... write resumed>) = 524288 [pid 6674] <... mount resumed>) = 0 [pid 5076] getdents64(4, [pid 6674] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6676] munmap(0x7eff79a00000, 138412032 [pid 6674] <... openat resumed>) = 3 [pid 6671] <... mount resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6674] chdir("./file1" [pid 6677] munmap(0x7eff79a00000, 138412032 [pid 6674] <... chdir resumed>) = 0 [pid 6671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5076] getdents64(4, [pid 6677] <... munmap resumed>) = 0 [pid 6676] <... munmap resumed>) = 0 [pid 6674] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6671] <... openat resumed>) = 3 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6674] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... close resumed>) = 0 [pid 6677] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6676] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6674] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] chdir("./file1" [pid 5076] rmdir("./88/file1" [pid 6678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6677] <... openat resumed>) = 4 [pid 6676] <... openat resumed>) = 4 [pid 6674] <... futex resumed>) = 1 [pid 6671] <... chdir resumed>) = 0 [pid 6669] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6677] ioctl(4, LOOP_SET_FD, 3 [pid 6676] ioctl(4, LOOP_SET_FD, 3 [pid 6674] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6671] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6669] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 6678] <... write resumed>) = 524288 [pid 6677] <... ioctl resumed>) = 0 [pid 6674] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6671] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6669] <... futex resumed>) = 0 [pid 6669] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6671] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] close(3 [pid 6671] <... futex resumed>) = 1 [pid 5076] <... close resumed>) = 0 [pid 6671] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] rmdir("./88" [pid 6668] <... futex resumed>) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6674] creat("./file0", 000 [pid 6668] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] mkdir("./89", 0777 [pid 6678] munmap(0x7eff79a00000, 138412032 [pid 6677] close(3 [pid 6676] <... ioctl resumed>) = 0 [pid 6678] <... munmap resumed>) = 0 [pid 6677] <... close resumed>) = 0 [pid 6676] close(3 [pid 6674] <... creat resumed>) = 4 [pid 6671] <... futex resumed>) = 0 [pid 6668] <... futex resumed>) = 1 [pid 5076] <... mkdir resumed>) = 0 [pid 6678] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6677] close(4 [pid 6676] <... close resumed>) = 0 [pid 6674] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] creat("./file0", 000 [pid 6668] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6678] <... openat resumed>) = 4 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6678] ioctl(4, LOOP_SET_FD, 3 [pid 6677] <... close resumed>) = 0 [pid 6676] close(4 [pid 6674] <... futex resumed>) = 1 [pid 6671] <... creat resumed>) = 4 [pid 6669] <... futex resumed>) = 0 [ 193.095349][ T6677] loop0: detected capacity change from 0 to 1024 [ 193.111668][ T6676] loop3: detected capacity change from 0 to 1024 [pid 6677] mkdir("./file1", 0777 [pid 6676] <... close resumed>) = 0 [pid 6674] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6671] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6677] <... mkdir resumed>) = 0 [pid 6676] mkdir("./file1", 0777 [pid 6671] <... futex resumed>) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6668] <... futex resumed>) = 0 [pid 6676] <... mkdir resumed>) = 0 [pid 6669] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6668] <... futex resumed>) = 0 [pid 6678] <... ioctl resumed>) = 0 [pid 6668] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6678] close(3) = 0 [pid 6678] close(4) = 0 [pid 6677] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6676] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6678] mkdir("./file1", 0777) = 0 [ 193.149267][ T6678] loop2: detected capacity change from 0 to 1024 [ 193.164441][ T6674] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.171782][ T6674] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.188931][ T6671] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6678] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6669] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6676] <... mount resumed>) = 0 [pid 6669] <... mmap resumed>) = 0x7eff81e8c000 [pid 6676] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6669] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6677] <... mount resumed>) = 0 [pid 6676] <... openat resumed>) = 3 [pid 6669] <... mprotect resumed>) = 0 [pid 6677] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6676] chdir("./file1" [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... ioctl resumed>) = 0 [pid 6677] <... openat resumed>) = 3 [pid 6676] <... chdir resumed>) = 0 [pid 6669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6677] chdir("./file1" [pid 6676] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 193.200372][ T6671] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6677] <... chdir resumed>) = 0 [pid 6676] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6677] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6676] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] <... clone3 resumed> => {parent_tid=[6679]}, 88) = 6679 [pid 6677] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6676] <... futex resumed>) = 1 [pid 6669] rt_sigprocmask(SIG_SETMASK, [], [pid 6677] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6676] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6679 attached [pid 6677] <... futex resumed>) = 1 [pid 6673] <... futex resumed>) = 0 [pid 6672] <... futex resumed>) = 0 [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6679] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6677] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... rseq resumed>) = 0 [pid 6677] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6676] <... futex resumed>) = 0 [pid 6673] <... futex resumed>) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6679] set_robust_list(0x7eff81eac9a0, 24 [pid 6677] creat("./file0", 000 [pid 6676] creat("./file0", 000 [pid 6673] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6669] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6672] <... futex resumed>) = 0 [pid 6679] <... set_robust_list resumed>) = 0 [pid 6677] <... creat resumed>) = 4 [pid 6676] <... creat resumed>) = 4 [pid 5076] close(3 [pid 6672] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6679] rt_sigprocmask(SIG_SETMASK, [], [pid 6678] <... mount resumed>) = 0 [pid 6677] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... close resumed>) = 0 [pid 6672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6677] <... futex resumed>) = 0 [pid 6676] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6679] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6678] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6677] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6676] <... futex resumed>) = 1 [pid 6673] <... futex resumed>) = 0 [pid 6672] <... futex resumed>) = 0 [pid 6668] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6678] <... openat resumed>) = 3 [pid 6676] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] <... futex resumed>) = 0 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6680 [pid 6673] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6678] chdir("./file1" [pid 6668] <... futex resumed>) = 0 [pid 6668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6678] <... chdir resumed>) = 0 [pid 6668] <... mmap resumed>) = 0x7eff81e8c000 [pid 6678] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6668] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6680 attached [pid 6676] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6680] set_robust_list(0x5555571ca6a0, 24 [pid 6676] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6680] <... set_robust_list resumed>) = 0 [pid 6680] chdir("./89") = 0 [pid 6680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6680] setpgid(0, 0) = 0 [pid 6680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6680] write(3, "1000", 4) = 4 [pid 6680] close(3) = 0 [pid 6680] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6678] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6680] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] <... futex resumed>) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6668] <... mprotect resumed>) = 0 [pid 6680] <... futex resumed>) = 0 [ 193.244423][ T6674] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.260099][ T6677] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.269878][ T6671] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.279967][ T6674] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6680] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6678] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6675] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6680] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6675] <... futex resumed>) = 0 [pid 6668] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6680] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6678] creat("./file0", 000 [pid 6675] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6673] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6672] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6681 attached [pid 6680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6673] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] <... creat resumed>) = 4 [pid 6672] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6681] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6678] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6668] <... clone3 resumed> => {parent_tid=[6681]}, 88) = 6681 [ 193.294545][ T6671] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.302543][ T6677] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.310256][ T6677] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.319771][ T6676] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.336583][ T6671] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6673] <... futex resumed>) = 0 [pid 6680] <... mmap resumed>) = 0x7eff81ead000 [pid 6678] <... futex resumed>) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6673] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6681] <... rseq resumed>) = 0 [pid 6678] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6675] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] <... mmap resumed>) = 0x7eff81e8c000 [pid 6668] rt_sigprocmask(SIG_SETMASK, [], [pid 6681] set_robust_list(0x7eff81eac9a0, 24 [pid 6680] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6673] <... mmap resumed>) = 0x7eff81e8c000 [pid 6680] <... mprotect resumed>) = 0 [pid 6673] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6680] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6673] <... mprotect resumed>) = 0 [pid 6680] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6673] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6673] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6682 attached [pid 6681] <... set_robust_list resumed>) = 0 [pid 6675] <... futex resumed>) = 0 [pid 6673] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6672] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6682] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6681] rt_sigprocmask(SIG_SETMASK, [], [pid 6675] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6672] <... mprotect resumed>) = 0 [pid 6668] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] <... rseq resumed>) = 0 [pid 6681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6680] <... clone3 resumed> => {parent_tid=[6682]}, 88) = 6682 [pid 6673] <... clone3 resumed> => {parent_tid=[6683]}, 88) = 6683 [pid 6672] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6668] <... futex resumed>) = 0 [pid 6668] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6681] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6672] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6683 attached [pid 6682] set_robust_list(0x7eff81ecd9a0, 24 [pid 6680] rt_sigprocmask(SIG_SETMASK, [], [pid 6673] rt_sigprocmask(SIG_SETMASK, [], [pid 6672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6683] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6682] <... set_robust_list resumed>) = 0 [pid 6680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6673] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6683] <... rseq resumed>) = 0 [pid 6682] rt_sigprocmask(SIG_SETMASK, [], [pid 6680] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] set_robust_list(0x7eff81eac9a0, 24 [pid 6682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6680] <... futex resumed>) = 0 [pid 6673] <... futex resumed>) = 0 [pid 6683] <... set_robust_list resumed>) = 0 [pid 6682] memfd_create("syzkaller", 0 [pid 6680] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6673] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6683] rt_sigprocmask(SIG_SETMASK, [], [pid 6682] <... memfd_create resumed>) = 3 [pid 6672] <... clone3 resumed> => {parent_tid=[6684]}, 88) = 6684 [pid 6683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6682] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6672] rt_sigprocmask(SIG_SETMASK, [], [pid 6683] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6682] <... mmap resumed>) = 0x7eff79a00000 [ 193.342142][ T6674] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.343956][ T6676] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.359017][ T6674] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.363720][ T6677] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.377758][ T6671] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6672] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6684 attached [pid 6682] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6679] <... open resumed>) = 5 [pid 6679] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6679] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6684] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6681] <... open resumed>) = 5 [pid 6675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6674] <... write resumed>) = 53248 [pid 6672] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6671] <... write resumed>) = 53248 [pid 6684] <... rseq resumed>) = 0 [pid 6681] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] <... futex resumed>) = 0 [ 193.402635][ T6678] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.409956][ T6678] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.415223][ T6676] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.435281][ T6677] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.442534][ T6678] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6684] set_robust_list(0x7eff81eac9a0, 24 [pid 6681] <... futex resumed>) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6674] <... futex resumed>) = 0 [pid 6673] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6672] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6669] exit_group(0 [pid 6668] <... futex resumed>) = 0 [pid 6679] <... futex resumed>) = ? [pid 6669] <... exit_group resumed>) = ? [pid 6679] +++ exited with 0 +++ [pid 6684] <... set_robust_list resumed>) = 0 [pid 6681] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6671] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] exit_group(0 [pid 6671] <... futex resumed>) = 0 [pid 6671] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] <... write resumed>) = 524288 [pid 6684] rt_sigprocmask(SIG_SETMASK, [], [pid 6681] <... futex resumed>) = ? [pid 6675] <... mmap resumed>) = 0x7eff81e8c000 [pid 6674] +++ exited with 0 +++ [pid 6671] <... futex resumed>) = ? [pid 6669] +++ exited with 0 +++ [pid 6668] <... exit_group resumed>) = ? [pid 6684] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6681] +++ exited with 0 +++ [pid 6684] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6675] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6671] +++ exited with 0 +++ [pid 6668] +++ exited with 0 +++ [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6669, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5072] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] unlink("./87/binderfs" [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6668, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5072] <... unlink resumed>) = 0 [pid 6675] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6682] munmap(0x7eff79a00000, 138412032 [pid 5072] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6682] <... munmap resumed>) = 0 [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6685 attached [pid 6682] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6672] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6685] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6675] <... clone3 resumed> => {parent_tid=[6685]}, 88) = 6685 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6685] <... rseq resumed>) = 0 [pid 6675] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 193.452616][ T6678] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.457360][ T6677] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.472690][ T6678] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.486122][ T6678] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.491486][ T6676] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6685] set_robust_list(0x7eff81eac9a0, 24 [pid 6684] <... open resumed>) = 5 [pid 6683] <... open resumed>) = 5 [pid 6682] <... openat resumed>) = 4 [pid 6678] <... write resumed>) = 53248 [pid 6677] <... write resumed>) = 53248 [pid 6675] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... openat resumed>) = 3 [pid 6685] <... set_robust_list resumed>) = 0 [pid 6683] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] ioctl(4, LOOP_SET_FD, 3 [pid 6678] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] <... futex resumed>) = 0 [pid 6685] rt_sigprocmask(SIG_SETMASK, [], [pid 6683] <... futex resumed>) = 0 [pid 6678] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = 0 [pid 6675] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] newfstatat(3, "", [pid 6683] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6677] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6684] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = 0 [pid 5072] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./87/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4) = 0 [pid 5072] rmdir("./87/file1" [pid 6684] <... futex resumed>) = 0 [pid 6672] exit_group(0 [pid 5075] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 6677] <... futex resumed>) = ? [pid 6672] <... exit_group resumed>) = ? [pid 6677] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6685] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5072] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] close(3) = 0 [pid 5072] rmdir("./87" [pid 6685] <... open resumed>) = 5 [pid 5072] <... rmdir resumed>) = 0 [pid 6682] <... ioctl resumed>) = 0 [pid 6682] close(3) = 0 [pid 5072] mkdir("./88", 0777 [pid 6682] close(4 [pid 5072] <... mkdir resumed>) = 0 [pid 6682] <... close resumed>) = 0 [pid 6682] mkdir("./file1", 0777) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6685] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] +++ exited with 0 +++ [pid 6682] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6676] <... write resumed>) = 53248 [pid 6672] +++ exited with 0 +++ [pid 5075] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 6685] <... futex resumed>) = 1 [pid 6675] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6675] exit_group(0 [pid 5075] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6672, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6678] <... futex resumed>) = ? [ 193.514923][ T6682] loop5: detected capacity change from 0 to 1024 [ 193.521611][ T6676] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.530427][ T6676] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6675] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6685] +++ exited with 0 +++ [pid 6678] +++ exited with 0 +++ [pid 6676] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] +++ exited with 0 +++ [pid 5075] unlink("./87/binderfs" [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6676] <... futex resumed>) = 0 [pid 6673] exit_group(0 [pid 5075] <... unlink resumed>) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6675, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5071] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6683] <... futex resumed>) = ? [pid 6673] <... exit_group resumed>) = ? [pid 5075] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] restart_syscall(<... resuming interrupted clone ...> [pid 5071] <... openat resumed>) = 3 [pid 6683] +++ exited with 0 +++ [pid 5073] <... restart_syscall resumed>) = 0 [pid 5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(3, [pid 5073] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6676] +++ exited with 0 +++ [pid 6682] <... mount resumed>) = 0 [pid 6673] +++ exited with 0 +++ [pid 5073] <... openat resumed>) = 3 [pid 5071] newfstatat(AT_FDCWD, "./89/binderfs", [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6673, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5073] newfstatat(3, "", [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6682] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] unlink("./89/binderfs" [pid 6682] <... openat resumed>) = 3 [pid 5073] getdents64(3, [pid 5071] <... unlink resumed>) = 0 [pid 6682] chdir("./file1" [pid 5074] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6682] <... chdir resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6682] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6682] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5074] <... openat resumed>) = 3 [pid 6682] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(3, "", [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6682] <... futex resumed>) = 1 [pid 6680] <... futex resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6682] creat("./file0", 000 [pid 6680] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(3, [pid 5073] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6680] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6680] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6682] <... creat resumed>) = 4 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5073] unlink("./87/binderfs" [pid 6682] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... unlink resumed>) = 0 [pid 6682] <... futex resumed>) = 1 [pid 6680] <... futex resumed>) = 0 [pid 6682] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6680] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] unlink("./88/binderfs" [pid 5073] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6680] <... futex resumed>) = 0 [pid 6680] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... unlink resumed>) = 0 [pid 5074] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = 0 [pid 5075] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... umount2 resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./87/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] getdents64(4, [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] newfstatat(AT_FDCWD, "./87/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] getdents64(4, [pid 5073] umount2("./87/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] close(4 [pid 5073] openat(AT_FDCWD, "./87/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5075] rmdir("./87/file1" [pid 5073] newfstatat(4, "", [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] close(3 [pid 5071] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 6680] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] getdents64(3, [pid 5073] rmdir("./87/file1" [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6680] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./89/file1", [pid 6680] <... futex resumed>) = 0 [pid 6680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6680] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] close(3 [pid 5074] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] getdents64(3, [pid 5071] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6680] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5075] <... close resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5075] rmdir("./87" [pid 5074] newfstatat(AT_FDCWD, "./88/file1", [pid 5073] close(3./strace-static-x86_64: Process 6686 attached [pid 5075] <... rmdir resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... close resumed>) = 0 [pid 6686] set_robust_list(0x5555571ca6a0, 24 [pid 5074] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] rmdir("./87" [pid 6686] <... set_robust_list resumed>) = 0 [ 193.642923][ T6682] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.662479][ T6682] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.683489][ T6682] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] mkdir("./88", 0777 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... rmdir resumed>) = 0 [pid 6686] chdir("./88" [pid 6680] <... mprotect resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] mkdir("./88", 0777 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6686 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6686] <... chdir resumed>) = 0 [pid 6680] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... openat resumed>) = 4 [pid 5071] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6680] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5071] <... openat resumed>) = 4 [pid 6680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5071] newfstatat(4, "", ./strace-static-x86_64: Process 6687 attached [pid 5075] <... openat resumed>) = 3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5074] newfstatat(4, "", [pid 6687] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6680] <... clone3 resumed> => {parent_tid=[6687]}, 88) = 6687 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6687] <... rseq resumed>) = 0 [pid 6680] rt_sigprocmask(SIG_SETMASK, [], [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6687] set_robust_list(0x7eff81eac9a0, 24 [pid 6680] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] getdents64(4, [pid 6687] <... set_robust_list resumed>) = 0 [pid 6680] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6687] rt_sigprocmask(SIG_SETMASK, [], [pid 6680] <... futex resumed>) = 0 [pid 5071] close(4 [pid 6687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6680] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6687] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5071] <... close resumed>) = 0 [pid 6686] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5074] getdents64(4, [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] rmdir("./89/file1" [pid 6687] <... open resumed>) = 5 [pid 6686] <... prctl resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... openat resumed>) = 3 [pid 5071] <... rmdir resumed>) = 0 [pid 6687] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] getdents64(3, [pid 6687] <... futex resumed>) = 1 [pid 6680] <... futex resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6687] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5071] close(3) = 0 [pid 5071] rmdir("./89") = 0 [pid 5074] getdents64(4, [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5071] mkdir("./90", 0777 [pid 6686] setpgid(0, 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 5074] close(4 [pid 6686] <... setpgid resumed>) = 0 [pid 6686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5074] <... close resumed>) = 0 [pid 6682] <... write resumed>) = 53248 [pid 5074] rmdir("./88/file1" [pid 6686] <... openat resumed>) = 3 [pid 5075] <... ioctl resumed>) = 0 [pid 6682] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6686] write(3, "1000", 4 [pid 6680] exit_group(0 [pid 5075] close(3 [pid 5074] <... rmdir resumed>) = 0 [pid 6686] <... write resumed>) = 4 [pid 5074] getdents64(3, [pid 6686] close(3 [pid 5075] <... close resumed>) = 0 [pid 6686] <... close resumed>) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6686] symlink("/dev/binderfs", "./binderfs" [pid 6682] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6687] <... futex resumed>) = ? [pid 6686] <... symlink resumed>) = 0 [pid 6682] <... futex resumed>) = ? [pid 6680] <... exit_group resumed>) = ? [pid 5074] close(3 [pid 6682] +++ exited with 0 +++ ./strace-static-x86_64: Process 6688 attached [pid 6686] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... close resumed>) = 0 [pid 6686] <... futex resumed>) = 0 [pid 5074] rmdir("./88") = 0 [pid 6686] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6688] set_robust_list(0x5555571ca6a0, 24 [pid 6686] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6688 [pid 5074] mkdir("./89", 0777 [pid 6686] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6687] +++ exited with 0 +++ [pid 6686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6680] +++ exited with 0 +++ [pid 5074] <... mkdir resumed>) = 0 [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6680, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6686] <... mmap resumed>) = 0x7eff81ead000 [pid 6686] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6686] <... mprotect resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5076] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./89/binderfs") = 0 [pid 5076] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6688] <... set_robust_list resumed>) = 0 [ 193.692574][ T6682] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.713614][ T6682] hfsplus: request for non-existent node 16777216 in B*Tree [ 193.723280][ T6682] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6688] chdir("./88") = 0 [pid 6686] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5071] <... ioctl resumed>) = 0 [pid 6686] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6688] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5074] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6689 attached [pid 6688] <... prctl resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5073] <... ioctl resumed>) = 0 [pid 6689] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6688] setpgid(0, 0 [pid 6686] <... clone3 resumed> => {parent_tid=[6689]}, 88) = 6689 [pid 5073] close(3 [pid 6689] <... rseq resumed>) = 0 [pid 6688] <... setpgid resumed>) = 0 [pid 6686] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... close resumed>) = 0 [pid 6689] set_robust_list(0x7eff81ecd9a0, 24 [pid 6688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6689] <... set_robust_list resumed>) = 0 [pid 6688] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6690 attached [pid 6689] rt_sigprocmask(SIG_SETMASK, [], [pid 6688] write(3, "1000", 4 [pid 6686] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6690 [pid 6689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6686] <... futex resumed>) = 0 [pid 6686] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] close(3 [pid 6689] memfd_create("syzkaller", 0 [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6690] set_robust_list(0x5555571ca6a0, 24 [pid 6689] <... memfd_create resumed>) = 3 [pid 6690] <... set_robust_list resumed>) = 0 [pid 6690] chdir("./88"./strace-static-x86_64: Process 6691 attached ) = 0 [pid 6689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6688] <... write resumed>) = 4 [pid 6688] close(3 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6691 [pid 6688] <... close resumed>) = 0 [pid 6688] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... umount2 resumed>) = 0 [pid 6688] <... symlink resumed>) = 0 [pid 5076] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6688] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6690] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6689] <... mmap resumed>) = 0x7eff79a00000 [pid 6688] <... futex resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6690] <... prctl resumed>) = 0 [pid 6688] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] newfstatat(AT_FDCWD, "./89/file1", [pid 6690] setpgid(0, 0 [pid 6688] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6690] <... setpgid resumed>) = 0 [pid 6690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6691] set_robust_list(0x5555571ca6a0, 24 [pid 6688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6691] <... set_robust_list resumed>) = 0 [pid 6690] <... openat resumed>) = 3 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6691] chdir("./90" [pid 6690] write(3, "1000", 4 [pid 6688] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] <... openat resumed>) = 4 [pid 6691] <... chdir resumed>) = 0 [pid 6690] <... write resumed>) = 4 [pid 6688] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] newfstatat(4, "", [pid 6691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6690] close(3 [pid 6688] <... mprotect resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6691] <... prctl resumed>) = 0 [pid 6690] <... close resumed>) = 0 [pid 5076] getdents64(4, [pid 6691] setpgid(0, 0 [pid 6690] symlink("/dev/binderfs", "./binderfs" [pid 6689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6691] <... setpgid resumed>) = 0 [pid 6690] <... symlink resumed>) = 0 [pid 6688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] getdents64(4, [pid 6691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6690] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6691] <... openat resumed>) = 3 [pid 6690] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6691] write(3, "1000", 4 [pid 6688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 6691] <... write resumed>) = 4 [pid 6690] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... close resumed>) = 0 [pid 6691] close(3 [pid 6690] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6688] <... clone3 resumed> => {parent_tid=[6692]}, 88) = 6692 [pid 5076] rmdir("./89/file1" [pid 6691] <... close resumed>) = 0 [pid 6690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6688] rt_sigprocmask(SIG_SETMASK, [], [pid 6691] symlink("/dev/binderfs", "./binderfs" [pid 6690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 5074] close(3./strace-static-x86_64: Process 6692 attached [pid 6691] <... symlink resumed>) = 0 [pid 6690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6688] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(3, [pid 5074] <... close resumed>) = 0 [pid 6692] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6691] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6690] <... mmap resumed>) = 0x7eff81ead000 [pid 6689] <... write resumed>) = 524288 [pid 6688] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6692] <... rseq resumed>) = 0 [pid 6691] <... futex resumed>) = 0 [pid 6690] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6688] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] close(3 [pid 6691] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6690] <... mprotect resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6691] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] rmdir("./89" [pid 6691] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6692] set_robust_list(0x7eff81ecd9a0, 24 [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... rmdir resumed>) = 0 [pid 6692] <... set_robust_list resumed>) = 0 [pid 6691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] mkdir("./90", 0777 [pid 6692] rt_sigprocmask(SIG_SETMASK, [], [pid 6691] <... mmap resumed>) = 0x7eff81ead000 [pid 6692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6690] <... clone3 resumed> => {parent_tid=[6694]}, 88) = 6694 ./strace-static-x86_64: Process 6694 attached [pid 6692] memfd_create("syzkaller", 0 [pid 6691] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6690] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... mkdir resumed>) = 0 [pid 6694] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6692] <... memfd_create resumed>) = 3 [pid 6691] <... mprotect resumed>) = 0 [pid 6690] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6693 attached [pid 6694] <... rseq resumed>) = 0 [pid 6692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6690] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6693] set_robust_list(0x5555571ca6a0, 24 [pid 6694] set_robust_list(0x7eff81ecd9a0, 24 [pid 6692] <... mmap resumed>) = 0x7eff79a00000 [pid 6691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6690] <... futex resumed>) = 0 [pid 6689] munmap(0x7eff79a00000, 138412032 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6693 [pid 6694] <... set_robust_list resumed>) = 0 [pid 6691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6690] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6695 attached [pid 6693] <... set_robust_list resumed>) = 0 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] <... openat resumed>) = 3 [pid 6695] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6693] chdir("./89" [pid 6694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6695] <... rseq resumed>) = 0 [pid 6693] <... chdir resumed>) = 0 [pid 6694] memfd_create("syzkaller", 0 [pid 6692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6691] <... clone3 resumed> => {parent_tid=[6695]}, 88) = 6695 [pid 6689] <... munmap resumed>) = 0 [pid 6695] set_robust_list(0x7eff81ecd9a0, 24 [pid 6693] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6694] <... memfd_create resumed>) = 3 [pid 6691] rt_sigprocmask(SIG_SETMASK, [], [pid 6689] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6695] <... set_robust_list resumed>) = 0 [pid 6693] <... prctl resumed>) = 0 [pid 6694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] rt_sigprocmask(SIG_SETMASK, [], [pid 6693] setpgid(0, 0 [pid 6694] <... mmap resumed>) = 0x7eff79a00000 [pid 6691] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... openat resumed>) = 4 [pid 6695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6693] <... setpgid resumed>) = 0 [pid 6691] <... futex resumed>) = 0 [pid 6693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6691] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6689] ioctl(4, LOOP_SET_FD, 3 [pid 6695] memfd_create("syzkaller", 0 [pid 6693] <... openat resumed>) = 3 [pid 6694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6695] <... memfd_create resumed>) = 3 [pid 6692] <... write resumed>) = 524288 [pid 6695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6692] munmap(0x7eff79a00000, 138412032 [pid 6695] <... mmap resumed>) = 0x7eff79a00000 [pid 6692] <... munmap resumed>) = 0 [pid 6692] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6693] write(3, "1000", 4) = 4 [pid 6692] <... openat resumed>) = 4 [pid 6693] close(3) = 0 [pid 6692] ioctl(4, LOOP_SET_FD, 3 [pid 6693] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6693] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6689] <... ioctl resumed>) = 0 [pid 6693] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6689] close(3 [pid 6693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6693] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6689] <... close resumed>) = 0 [pid 6693] <... mprotect resumed>) = 0 [pid 6689] close(4) = 0 [pid 6689] mkdir("./file1", 0777 [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6689] <... mkdir resumed>) = 0 [pid 6693] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6696 attached [pid 6695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6693] <... clone3 resumed> => {parent_tid=[6696]}, 88) = 6696 [pid 6689] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6696] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6693] rt_sigprocmask(SIG_SETMASK, [], [pid 6696] set_robust_list(0x7eff81ecd9a0, 24 [pid 6693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6696] <... set_robust_list resumed>) = 0 [pid 6693] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6696] rt_sigprocmask(SIG_SETMASK, [], [pid 6693] <... futex resumed>) = 0 [pid 6696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6693] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6694] <... write resumed>) = 524288 [pid 6696] memfd_create("syzkaller", 0) = 3 [ 193.938553][ T6689] loop1: detected capacity change from 0 to 1024 [ 193.955887][ T6692] loop4: detected capacity change from 0 to 1024 [pid 6696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 5076] <... ioctl resumed>) = 0 [pid 6696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] close(3) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6694] munmap(0x7eff79a00000, 138412032 [pid 6692] <... ioctl resumed>) = 0 [pid 6692] close(3 [pid 6689] <... mount resumed>) = 0 [pid 6692] <... close resumed>) = 0 [pid 6689] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6697 attached [pid 6694] <... munmap resumed>) = 0 [pid 6692] close(4 [pid 6689] <... openat resumed>) = 3 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6697 [pid 6697] set_robust_list(0x5555571ca6a0, 24 [pid 6695] <... write resumed>) = 524288 [pid 6692] <... close resumed>) = 0 [pid 6689] chdir("./file1" [pid 6697] <... set_robust_list resumed>) = 0 [pid 6696] <... write resumed>) = 524288 [pid 6695] munmap(0x7eff79a00000, 138412032 [pid 6694] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6692] mkdir("./file1", 0777 [pid 6689] <... chdir resumed>) = 0 [pid 6689] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6692] <... mkdir resumed>) = 0 [pid 6689] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6689] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] chdir("./90" [pid 6695] <... munmap resumed>) = 0 [pid 6692] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6689] <... futex resumed>) = 1 [pid 6686] <... futex resumed>) = 0 [pid 6694] <... openat resumed>) = 4 [pid 6697] <... chdir resumed>) = 0 [pid 6695] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6686] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] ioctl(4, LOOP_SET_FD, 3 [pid 6689] creat("./file0", 000 [pid 6686] <... futex resumed>) = 0 [pid 6697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6695] <... openat resumed>) = 4 [pid 6689] <... creat resumed>) = 4 [pid 6686] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6689] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6686] <... futex resumed>) = 0 [pid 6686] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] <... prctl resumed>) = 0 [pid 6695] ioctl(4, LOOP_SET_FD, 3 [pid 6689] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6686] <... futex resumed>) = 0 [pid 6696] munmap(0x7eff79a00000, 138412032 [pid 6686] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6697] setpgid(0, 0 [pid 6695] <... ioctl resumed>) = 0 [pid 6694] <... ioctl resumed>) = 0 [pid 6697] <... setpgid resumed>) = 0 [pid 6695] close(3 [pid 6694] close(3 [pid 6695] <... close resumed>) = 0 [pid 6694] <... close resumed>) = 0 [pid 6695] close(4 [pid 6694] close(4 [pid 6695] <... close resumed>) = 0 [pid 6694] <... close resumed>) = 0 [pid 6694] mkdir("./file1", 0777) = 0 [pid 6695] mkdir("./file1", 0777 [pid 6697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6695] <... mkdir resumed>) = 0 [pid 6697] <... openat resumed>) = 3 [pid 6696] <... munmap resumed>) = 0 [pid 6692] <... mount resumed>) = 0 [pid 6697] write(3, "1000", 4 [pid 6695] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6694] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6697] <... write resumed>) = 4 [pid 6696] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6697] close(3 [pid 6696] <... openat resumed>) = 4 [pid 6697] <... close resumed>) = 0 [pid 6692] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6697] symlink("/dev/binderfs", "./binderfs" [pid 6692] <... openat resumed>) = 3 [pid 6697] <... symlink resumed>) = 0 [pid 6694] <... mount resumed>) = 0 [ 194.028932][ T6694] loop2: detected capacity change from 0 to 1024 [ 194.039218][ T6695] loop0: detected capacity change from 0 to 1024 [ 194.044149][ T6689] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6692] chdir("./file1" [pid 6697] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6696] ioctl(4, LOOP_SET_FD, 3 [pid 6694] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6697] <... futex resumed>) = 0 [pid 6694] <... openat resumed>) = 3 [pid 6692] <... chdir resumed>) = 0 [pid 6697] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6692] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6697] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6692] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6694] chdir("./file1" [pid 6692] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6697] <... mmap resumed>) = 0x7eff81ead000 [pid 6692] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6694] <... chdir resumed>) = 0 [pid 6697] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6694] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6688] <... futex resumed>) = 0 [pid 6697] <... mprotect resumed>) = 0 [pid 6695] <... mount resumed>) = 0 [pid 6694] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6688] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6690] <... futex resumed>) = 0 [pid 6690] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6694] creat("./file0", 000 [pid 6690] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6694] <... creat resumed>) = 4 [pid 6686] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6696] <... ioctl resumed>) = 0 [pid 6694] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6696] close(3 [pid 6694] <... futex resumed>) = 1 [pid 6690] <... futex resumed>) = 0 [pid 6686] <... mprotect resumed>) = 0 [pid 6696] <... close resumed>) = 0 [ 194.080047][ T6696] loop3: detected capacity change from 0 to 1024 [ 194.090958][ T6689] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6694] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6690] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6696] close(4 [pid 6695] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6692] <... futex resumed>) = 0 [pid 6690] <... futex resumed>) = 0 [pid 6688] <... futex resumed>) = 1 [pid 6686] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6697] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6696] <... close resumed>) = 0 [pid 6695] <... openat resumed>) = 3 [pid 6692] creat("./file0", 000 [pid 6690] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6688] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6686] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6696] mkdir("./file1", 0777 [pid 6695] chdir("./file1" [pid 6692] <... creat resumed>) = 4 [pid 6686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6698 attached [pid 6695] <... chdir resumed>) = 0 [pid 6692] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6697] <... clone3 resumed> => {parent_tid=[6698]}, 88) = 6698 [pid 6695] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6692] <... futex resumed>) = 1 [pid 6688] <... futex resumed>) = 0 [pid 6697] rt_sigprocmask(SIG_SETMASK, [], [pid 6695] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6692] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6688] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] <... rseq resumed>) = 0 [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... futex resumed>) = 0 [pid 6695] <... futex resumed>) = 1 [pid 6691] <... futex resumed>) = 0 [pid 6688] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6697] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] set_robust_list(0x7eff81ecd9a0, 24 [pid 6697] <... futex resumed>) = 0 [pid 6696] <... mkdir resumed>) = 0 [pid 6695] creat("./file0", 000 [pid 6691] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] <... clone3 resumed> => {parent_tid=[6699]}, 88) = 6699 [pid 6698] <... set_robust_list resumed>) = 0 [pid 6697] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6691] <... futex resumed>) = 0 [pid 6686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6691] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6699 attached [pid 6698] rt_sigprocmask(SIG_SETMASK, [], [pid 6696] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6695] <... creat resumed>) = 4 [pid 6686] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6699] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] <... futex resumed>) = 0 [pid 6699] <... rseq resumed>) = 0 [pid 6686] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] memfd_create("syzkaller", 0 [pid 6695] <... futex resumed>) = 1 [pid 6691] <... futex resumed>) = 0 [pid 6699] set_robust_list(0x7eff81eac9a0, 24 [pid 6696] <... mount resumed>) = 0 [pid 6691] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6699] <... set_robust_list resumed>) = 0 [pid 6698] <... memfd_create resumed>) = 3 [ 194.120509][ T6694] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.129983][ T6689] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.158912][ T6694] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6696] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6691] <... futex resumed>) = 0 [pid 6699] rt_sigprocmask(SIG_SETMASK, [], [pid 6698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6696] <... openat resumed>) = 3 [pid 6691] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... mmap resumed>) = 0x7eff79a00000 [pid 6690] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6690] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6699] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6696] chdir("./file1") = 0 [pid 6696] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6696] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6696] <... futex resumed>) = 1 [pid 6690] <... futex resumed>) = 0 [pid 6696] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6693] <... futex resumed>) = 0 [pid 6690] <... mmap resumed>) = 0x7eff81e8c000 [pid 6688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6693] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6696] <... futex resumed>) = 0 [pid 6693] <... futex resumed>) = 1 [pid 6696] creat("./file0", 000 [pid 6693] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6688] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6696] <... creat resumed>) = 4 [ 194.160194][ T6692] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.167336][ T6689] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.191689][ T6694] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.194669][ T6695] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6688] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6696] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... mprotect resumed>) = 0 [pid 6686] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6696] <... futex resumed>) = 1 [pid 6693] <... futex resumed>) = 0 [pid 6688] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6693] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6688] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6693] <... futex resumed>) = 0 [pid 6688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6693] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6700 attached [pid 6696] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6690] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6688] <... clone3 resumed> => {parent_tid=[6700]}, 88) = 6700 [pid 6700] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6688] rt_sigprocmask(SIG_SETMASK, [], [pid 6700] <... rseq resumed>) = 0 [pid 6690] <... mprotect resumed>) = 0 [pid 6688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6700] set_robust_list(0x7eff81eac9a0, 24 [pid 6688] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6700] <... set_robust_list resumed>) = 0 [pid 6690] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6700] rt_sigprocmask(SIG_SETMASK, [], [pid 6690] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6688] <... futex resumed>) = 0 [pid 6700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6688] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6700] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6691] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6701 attached [pid 6698] <... write resumed>) = 524288 [pid 6691] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6690] <... clone3 resumed> => {parent_tid=[6701]}, 88) = 6701 [pid 6701] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6698] munmap(0x7eff79a00000, 138412032 [pid 6693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6691] <... mmap resumed>) = 0x7eff81e8c000 [pid 6690] rt_sigprocmask(SIG_SETMASK, [], [pid 6693] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6693] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6693] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6693] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6693] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6702 attached [pid 6702] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6693] <... clone3 resumed> => {parent_tid=[6702]}, 88) = 6702 [pid 6702] <... rseq resumed>) = 0 [pid 6701] <... rseq resumed>) = 0 [pid 6693] rt_sigprocmask(SIG_SETMASK, [], [pid 6691] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6690] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6702] set_robust_list(0x7eff81eac9a0, 24 [pid 6693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6691] <... mprotect resumed>) = 0 [pid 6690] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... set_robust_list resumed>) = 0 [pid 6701] set_robust_list(0x7eff81eac9a0, 24 [ 194.216841][ T6696] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.225227][ T6692] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.236693][ T6694] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.243478][ T6692] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.246572][ T6689] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.251688][ T6695] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6693] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] rt_sigprocmask(SIG_SETMASK, [], [pid 6701] <... set_robust_list resumed>) = 0 [pid 6698] <... munmap resumed>) = 0 [pid 6693] <... futex resumed>) = 0 [pid 6691] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6690] <... futex resumed>) = 0 [pid 6702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6701] rt_sigprocmask(SIG_SETMASK, [], [pid 6698] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6693] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6691] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6690] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6688] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6702] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6700] <... open resumed>) = 5 [pid 6698] <... openat resumed>) = 4 [pid 6691] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6701] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6700] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] ioctl(4, LOOP_SET_FD, 3 [pid 6700] <... futex resumed>) = 0 [pid 6700] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6703 attached [ 194.273293][ T6696] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.282312][ T6692] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.287495][ T6689] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.298668][ T6692] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.299382][ T6694] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.316571][ T6698] loop5: detected capacity change from 0 to 1024 [pid 6703] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6691] <... clone3 resumed> => {parent_tid=[6703]}, 88) = 6703 [pid 6703] <... rseq resumed>) = 0 [pid 6699] <... open resumed>) = 5 [pid 6698] <... ioctl resumed>) = 0 [pid 6693] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6691] rt_sigprocmask(SIG_SETMASK, [], [pid 6690] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] <... write resumed>) = 53248 [pid 6703] set_robust_list(0x7eff81eac9a0, 24 [pid 6699] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] exit_group(0 [pid 6703] <... set_robust_list resumed>) = 0 [pid 6699] <... futex resumed>) = 0 [pid 6698] close(3 [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6689] <... futex resumed>) = 0 [pid 6703] rt_sigprocmask(SIG_SETMASK, [], [pid 6699] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6689] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] <... futex resumed>) = ? [pid 6689] <... futex resumed>) = ? [pid 6686] <... exit_group resumed>) = ? [pid 6699] +++ exited with 0 +++ [pid 6689] +++ exited with 0 +++ [ 194.318670][ T6696] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.331049][ T6696] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.340462][ T6692] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.344022][ T6694] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.349581][ T6695] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6702] <... open resumed>) = 5 [pid 6698] <... close resumed>) = 0 [pid 6691] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6686] +++ exited with 0 +++ [pid 6698] close(4 [pid 6691] <... futex resumed>) = 1 [pid 6691] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... close resumed>) = 0 [pid 6703] <... futex resumed>) = 0 [pid 6702] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6692] <... write resumed>) = 53248 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6686, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6703] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6702] <... futex resumed>) = 0 [pid 6698] mkdir("./file1", 0777 [pid 6692] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6698] <... mkdir resumed>) = 0 [pid 6692] <... futex resumed>) = 0 [pid 6692] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6688] exit_group(0 [pid 5072] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6700] <... futex resumed>) = ? [pid 6692] <... futex resumed>) = ? [pid 6688] <... exit_group resumed>) = ? [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6700] +++ exited with 0 +++ [pid 6698] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6692] +++ exited with 0 +++ [pid 5072] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5072] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 194.369603][ T6696] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.382244][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 194.382264][ T28] audit: type=1800 audit(1708423272.005:539): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 194.405921][ T6695] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] getdents64(3, [pid 6701] <... open resumed>) = 5 [pid 6691] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6703] <... open resumed>) = 5 [pid 6688] +++ exited with 0 +++ [pid 5072] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6688, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5075] restart_syscall(<... resuming interrupted clone ...> [pid 6703] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6701] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... restart_syscall resumed>) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6701] <... futex resumed>) = 0 [ 194.423892][ T6696] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.455565][ T6695] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6701] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] <... futex resumed>) = 0 [pid 6696] <... write resumed>) = 53248 [pid 5072] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6703] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6696] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6696] <... futex resumed>) = 0 [pid 5072] unlink("./88/binderfs" [pid 6696] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] <... unlink resumed>) = 0 [pid 6698] <... mount resumed>) = 0 [pid 5072] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6693] exit_group(0 [pid 6694] <... write resumed>) = 53248 [pid 5075] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6696] <... futex resumed>) = ? [pid 6693] <... exit_group resumed>) = ? [pid 6694] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6702] <... futex resumed>) = ? [pid 6694] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6694] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6702] +++ exited with 0 +++ [pid 6698] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6690] exit_group(0 [pid 5075] <... openat resumed>) = 3 [pid 6690] <... exit_group resumed>) = ? [pid 6698] chdir("./file1" [pid 6694] <... futex resumed>) = ? [pid 6701] <... futex resumed>) = ? [pid 6698] <... chdir resumed>) = 0 [pid 6694] +++ exited with 0 +++ [pid 5075] newfstatat(3, "", [pid 6698] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6698] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6698] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6701] +++ exited with 0 +++ [pid 6697] <... futex resumed>) = 0 [pid 6690] +++ exited with 0 +++ [pid 5075] getdents64(3, [pid 6697] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6690, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6697] <... futex resumed>) = 1 [pid 5073] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6697] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5073] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6698] <... futex resumed>) = 0 [pid 5075] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6698] creat("./file0", 000 [pid 5073] unlink("./88/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6698] <... creat resumed>) = 4 [pid 5075] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5073] <... unlink resumed>) = 0 [pid 6698] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6698] <... futex resumed>) = 1 [pid 6697] <... futex resumed>) = 0 [pid 6698] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6697] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./88/binderfs" [pid 6697] <... futex resumed>) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 6696] +++ exited with 0 +++ [pid 6693] +++ exited with 0 +++ [pid 6697] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6693, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5074] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5074] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 194.480558][ T6695] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.517808][ T6698] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6695] <... write resumed>) = 53248 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] getdents64(3, [pid 5072] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./89/binderfs" [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6695] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... unlink resumed>) = 0 [pid 5072] newfstatat(AT_FDCWD, "./88/file1", [pid 6695] <... futex resumed>) = 0 [pid 5075] newfstatat(AT_FDCWD, "./88/file1", [pid 6695] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6691] exit_group(0 [pid 6703] <... futex resumed>) = ? [pid 6697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6695] <... futex resumed>) = ? [pid 6691] <... exit_group resumed>) = ? [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5072] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6703] +++ exited with 0 +++ [pid 6697] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6697] <... futex resumed>) = 0 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... umount2 resumed>) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 5072] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6697] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6697] <... mprotect resumed>) = 0 [pid 5075] <... openat resumed>) = 4 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6697] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] newfstatat(4, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6697] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] newfstatat(AT_FDCWD, "./88/file1", [pid 6697] <... clone3 resumed> => {parent_tid=[6704]}, 88) = 6704 [pid 5075] getdents64(4, [pid 5074] newfstatat(AT_FDCWD, "./89/file1", ./strace-static-x86_64: Process 6704 attached [pid 6697] rt_sigprocmask(SIG_SETMASK, [], [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6704] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] umount2("./88/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6704] <... rseq resumed>) = 0 [pid 6697] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] +++ exited with 0 +++ [pid 6691] +++ exited with 0 +++ [pid 5074] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6691, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5075] getdents64(4, [pid 6704] set_robust_list(0x7eff81eac9a0, 24 [pid 6697] <... futex resumed>) = 0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6704] <... set_robust_list resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] openat(AT_FDCWD, "./88/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... openat resumed>) = 4 [pid 5075] close(4 [pid 6704] rt_sigprocmask(SIG_SETMASK, [], [pid 6697] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6704] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 194.529040][ T6698] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.537207][ T6698] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.547804][ T6698] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 6704] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5075] rmdir("./88/file1" [pid 5074] <... openat resumed>) = 4 [pid 5073] newfstatat(4, "", [pid 6704] <... open resumed>) = 5 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] newfstatat(4, "", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6704] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] getdents64(4, [pid 6704] <... futex resumed>) = 1 [pid 6697] <... futex resumed>) = 0 [pid 5074] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6704] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./89/file1") = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./89") = 0 [pid 5074] mkdir("./90", 0777) = 0 [pid 5075] getdents64(3, [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] getdents64(4, [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] getdents64(4, [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5075] close(3 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5074] ioctl(3, LOOP_CLR_FD [pid 5072] getdents64(4, [pid 5073] getdents64(4, [pid 5075] rmdir("./88" [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5072] close(4 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] mkdir("./89", 0777 [pid 5073] rmdir("./88/file1" [pid 5072] rmdir("./88/file1" [pid 5071] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6698] <... write resumed>) = 53248 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 6698] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] getdents64(3, [pid 5072] getdents64(3, [pid 5071] newfstatat(3, "", [pid 6698] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6698] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6697] exit_group(0 [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] close(3 [pid 5072] close(3 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6704] <... futex resumed>) = ? [pid 6698] <... futex resumed>) = ? [pid 6697] <... exit_group resumed>) = ? [pid 5073] <... close resumed>) = 0 [pid 5072] <... close resumed>) = 0 [pid 6704] +++ exited with 0 +++ [pid 5073] rmdir("./88" [pid 5072] rmdir("./88" [pid 5071] getdents64(3, [pid 5073] <... rmdir resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] mkdir("./89", 0777 [pid 5072] mkdir("./89", 0777 [pid 6698] +++ exited with 0 +++ [pid 6697] +++ exited with 0 +++ [pid 5073] <... mkdir resumed>) = 0 [pid 5071] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6697, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 3 [pid 5071] unlink("./90/binderfs" [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... unlink resumed>) = 0 [ 194.575666][ T28] audit: type=1800 audit(1708423272.195:540): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 194.599864][ T6698] hfsplus: request for non-existent node 16777216 in B*Tree [ 194.611175][ T6698] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... ioctl resumed>) = 0 [pid 5076] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 [pid 5076] newfstatat(3, "", [pid 5071] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] getdents64(3, [pid 5071] newfstatat(AT_FDCWD, "./90/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] <... close resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", [pid 5076] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... ioctl resumed>) = 0 [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] close(3 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6705 [pid 5072] <... close resumed>) = 0 ./strace-static-x86_64: Process 6705 attached [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6705] set_robust_list(0x5555571ca6a0, 24 [pid 5076] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6705] <... set_robust_list resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] getdents64(4, [pid 6705] chdir("./90" [pid 5076] unlink("./90/binderfs" [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6706 [pid 5076] <... unlink resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5076] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] rmdir("./90/file1" [pid 6705] <... chdir resumed>) = 0 [pid 6705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... rmdir resumed>) = 0 [pid 6705] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6706 attached [pid 5071] getdents64(3, [pid 6705] setpgid(0, 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6706] set_robust_list(0x5555571ca6a0, 24 [pid 5071] close(3 [pid 6706] <... set_robust_list resumed>) = 0 [pid 6705] <... setpgid resumed>) = 0 [pid 6706] chdir("./89" [pid 6705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5075] close(3) = 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6706] <... chdir resumed>) = 0 [pid 6706] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6705] <... openat resumed>) = 3 [pid 5071] <... close resumed>) = 0 [pid 6706] <... prctl resumed>) = 0 [pid 6706] setpgid(0, 0) = 0 [pid 6705] write(3, "1000", 4 [pid 6706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6705] <... write resumed>) = 4 [pid 5071] rmdir("./90" [pid 6705] close(3 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6706] <... openat resumed>) = 3 [pid 6706] write(3, "1000", 4 [pid 5073] close(3 [pid 5071] mkdir("./91", 0777 [pid 6706] <... write resumed>) = 4 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6707 [pid 6706] close(3 [pid 6705] <... close resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6706] <... close resumed>) = 0 [pid 6705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6706] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6707 attached [pid 5073] <... close resumed>) = 0 [pid 6706] <... futex resumed>) = 0 [pid 6705] <... futex resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] <... openat resumed>) = 3 [pid 6707] set_robust_list(0x5555571ca6a0, 24 [pid 6706] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6705] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6707] <... set_robust_list resumed>) = 0 [pid 6705] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6706] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6706] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6705] <... mmap resumed>) = 0x7eff81ead000 [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6705] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6705] <... mprotect resumed>) = 0 [pid 6707] chdir("./89" [pid 6706] <... mmap resumed>) = 0x7eff81ead000 [pid 6705] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6707] <... chdir resumed>) = 0 [pid 6706] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6705] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6706] <... mprotect resumed>) = 0 [pid 6705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6707] <... prctl resumed>) = 0 [pid 6706] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6707] setpgid(0, 0 [pid 6706] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6705] <... clone3 resumed> => {parent_tid=[6709]}, 88) = 6709 ./strace-static-x86_64: Process 6709 attached [pid 6707] <... setpgid resumed>) = 0 [pid 6706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6705] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6708 attached [pid 6709] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6708 [pid 6709] <... rseq resumed>) = 0 [pid 6708] set_robust_list(0x5555571ca6a0, 24 [pid 6705] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6709] set_robust_list(0x7eff81ecd9a0, 24 [pid 6708] <... set_robust_list resumed>) = 0 [pid 6705] <... futex resumed>) = 0 [pid 6709] <... set_robust_list resumed>) = 0 [pid 6708] chdir("./89" [pid 6706] <... clone3 resumed> => {parent_tid=[6710]}, 88) = 6710 [pid 6705] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6708] <... chdir resumed>) = 0 [pid 6709] memfd_create("syzkaller", 0 [pid 6708] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6706] rt_sigprocmask(SIG_SETMASK, [], [pid 6709] <... memfd_create resumed>) = 3 [pid 6708] <... prctl resumed>) = 0 [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] setpgid(0, 0 [pid 6706] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] newfstatat(AT_FDCWD, "./90/file1", [pid 6708] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6710 attached [pid 6708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6707] <... openat resumed>) = 3 [pid 6706] <... futex resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6706] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6708] <... openat resumed>) = 3 [pid 6709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6708] write(3, "1000", 4 [pid 6710] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6709] <... mmap resumed>) = 0x7eff79a00000 [pid 6708] <... write resumed>) = 4 [pid 5076] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6710] <... rseq resumed>) = 0 [pid 6709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6708] close(3 [pid 6707] write(3, "1000", 4 [pid 6708] <... close resumed>) = 0 [pid 6708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6710] set_robust_list(0x7eff81ecd9a0, 24 [pid 6708] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6710] <... set_robust_list resumed>) = 0 [pid 6708] <... futex resumed>) = 0 [pid 6707] close(3 [pid 5076] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6710] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6707] <... close resumed>) = 0 [pid 5076] <... openat resumed>) = 4 [pid 6710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6707] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(4, "", [pid 6710] memfd_create("syzkaller", 0 [pid 6708] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6707] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6710] <... memfd_create resumed>) = 3 [pid 6708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6707] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] getdents64(4, [pid 6710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6708] <... mmap resumed>) = 0x7eff81ead000 [pid 6707] <... futex resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6710] <... mmap resumed>) = 0x7eff79a00000 [pid 6708] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6707] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] getdents64(4, [pid 6708] <... mprotect resumed>) = 0 [pid 6707] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6708] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0}./strace-static-x86_64: Process 6711 attached => {parent_tid=[6711]}, 88) = 6711 [pid 6710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6707] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 6711] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6708] rt_sigprocmask(SIG_SETMASK, [], [pid 6711] <... rseq resumed>) = 0 [pid 6708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6711] set_robust_list(0x7eff81ecd9a0, 24 [pid 6708] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6711] <... set_robust_list resumed>) = 0 [pid 6708] <... futex resumed>) = 0 [pid 6711] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6709] <... write resumed>) = 524288 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] close(4 [pid 6711] memfd_create("syzkaller", 0 [pid 5076] <... close resumed>) = 0 [pid 6707] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] rmdir("./90/file1" [pid 6707] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... rmdir resumed>) = 0 [pid 6707] <... mprotect resumed>) = 0 [pid 5076] getdents64(3, [pid 5071] <... ioctl resumed>) = 0 [pid 6711] <... memfd_create resumed>) = 3 [pid 6707] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6707] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] close(3 [pid 6711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6709] munmap(0x7eff79a00000, 138412032 [pid 6707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] <... close resumed>) = 0 [pid 6711] <... mmap resumed>) = 0x7eff79a00000 [pid 6709] <... munmap resumed>) = 0 [pid 6711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5076] rmdir("./90" [pid 6709] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6712 attached ) = 4 [pid 6707] <... clone3 resumed> => {parent_tid=[6712]}, 88) = 6712 [pid 5076] <... rmdir resumed>) = 0 [pid 6707] rt_sigprocmask(SIG_SETMASK, [], [pid 5076] mkdir("./91", 0777 [pid 6712] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6709] ioctl(4, LOOP_SET_FD, 3 [pid 6712] <... rseq resumed>) = 0 [pid 6709] <... ioctl resumed>) = 0 [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6707] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] close(3 [pid 6712] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6710] <... write resumed>) = 524288 [pid 6707] <... futex resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6712] memfd_create("syzkaller", 0) = 3 [pid 6707] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] <... openat resumed>) = 3 [pid 6712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6712] <... mmap resumed>) = 0x7eff79a00000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6713 [pid 6712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6710] munmap(0x7eff79a00000, 138412032) = 0 ./strace-static-x86_64: Process 6713 attached [pid 6713] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6713] chdir("./91") = 0 [pid 6713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6709] close(3 [pid 6713] setpgid(0, 0 [pid 6709] <... close resumed>) = 0 [pid 6713] <... setpgid resumed>) = 0 [pid 6709] close(4 [pid 6713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6709] <... close resumed>) = 0 [pid 6709] mkdir("./file1", 0777) = 0 [pid 6713] <... openat resumed>) = 3 [pid 6711] <... write resumed>) = 524288 [pid 6709] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [ 194.845575][ T6709] loop3: detected capacity change from 0 to 1024 [pid 6713] write(3, "1000", 4 [pid 6710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6713] <... write resumed>) = 4 [pid 6713] close(3 [pid 6710] <... openat resumed>) = 4 [pid 6710] ioctl(4, LOOP_SET_FD, 3 [pid 6713] <... close resumed>) = 0 [pid 6711] munmap(0x7eff79a00000, 138412032 [pid 6713] symlink("/dev/binderfs", "./binderfs" [pid 6711] <... munmap resumed>) = 0 [pid 6713] <... symlink resumed>) = 0 [pid 6713] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6711] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6713] <... futex resumed>) = 0 [pid 6711] <... openat resumed>) = 4 [pid 6711] ioctl(4, LOOP_SET_FD, 3 [pid 6713] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6712] <... write resumed>) = 524288 [pid 6713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6713] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6713] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6709] <... mount resumed>) = 0 [pid 5076] <... ioctl resumed>) = 0 [pid 6713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6714]}, 88) = 6714 [pid 6713] rt_sigprocmask(SIG_SETMASK, [], [pid 6709] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6714 attached [pid 6713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] munmap(0x7eff79a00000, 138412032 [pid 6711] <... ioctl resumed>) = 0 [pid 6709] <... openat resumed>) = 3 [pid 6714] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6713] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6711] close(3 [pid 6709] chdir("./file1" [pid 6714] <... rseq resumed>) = 0 [pid 6712] <... munmap resumed>) = 0 [pid 6713] <... futex resumed>) = 0 [ 194.909682][ T6710] loop1: detected capacity change from 0 to 1024 [ 194.920378][ T6711] loop2: detected capacity change from 0 to 1024 [pid 6710] <... ioctl resumed>) = 0 [pid 6714] set_robust_list(0x7eff81ecd9a0, 24 [pid 6713] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6712] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6711] <... close resumed>) = 0 [pid 6710] close(3 [pid 6709] <... chdir resumed>) = 0 [pid 5076] close(3 [pid 6712] <... openat resumed>) = 4 [pid 6710] <... close resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6710] close(4 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6711] close(4 [pid 6710] <... close resumed>) = 0 [pid 6711] <... close resumed>) = 0 [pid 6714] <... set_robust_list resumed>) = 0 [pid 6711] mkdir("./file1", 0777 [pid 6709] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6714] rt_sigprocmask(SIG_SETMASK, [], [pid 6711] <... mkdir resumed>) = 0 [pid 6710] mkdir("./file1", 0777 [pid 6709] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6710] <... mkdir resumed>) = 0 [pid 6710] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6715 [pid 6714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6709] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] memfd_create("syzkaller", 0 [pid 6709] <... futex resumed>) = 1 [pid 6705] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6715 attached [pid 6712] ioctl(4, LOOP_SET_FD, 3 [pid 6709] creat("./file0", 000 [pid 6705] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] <... memfd_create resumed>) = 3 [pid 6709] <... creat resumed>) = 4 [pid 6705] <... futex resumed>) = 0 [pid 6711] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6715] set_robust_list(0x5555571ca6a0, 24 [pid 6705] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] <... set_robust_list resumed>) = 0 [pid 6715] chdir("./91" [pid 6714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6715] <... chdir resumed>) = 0 [pid 6714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6711] <... mount resumed>) = 0 [pid 6709] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6711] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6715] <... prctl resumed>) = 0 [pid 6711] <... openat resumed>) = 3 [pid 6711] chdir("./file1" [pid 6715] setpgid(0, 0 [pid 6711] <... chdir resumed>) = 0 [pid 6709] <... futex resumed>) = 1 [pid 6705] <... futex resumed>) = 0 [pid 6715] <... setpgid resumed>) = 0 [pid 6711] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6709] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6705] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6712] <... ioctl resumed>) = 0 [pid 6711] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6710] <... mount resumed>) = 0 [pid 6705] <... futex resumed>) = 0 [pid 6712] close(3 [pid 6711] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6710] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6712] <... close resumed>) = 0 [pid 6711] <... futex resumed>) = 1 [pid 6712] close(4 [pid 6711] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6710] <... openat resumed>) = 3 [pid 6715] <... openat resumed>) = 3 [pid 6712] <... close resumed>) = 0 [pid 6710] chdir("./file1" [pid 6708] <... futex resumed>) = 0 [pid 6705] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] write(3, "1000", 4 [pid 6712] mkdir("./file1", 0777 [pid 6710] <... chdir resumed>) = 0 [pid 6708] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... write resumed>) = 4 [pid 6711] <... futex resumed>) = 0 [pid 6708] <... futex resumed>) = 1 [ 194.975948][ T6712] loop4: detected capacity change from 0 to 1024 [pid 6715] close(3 [pid 6712] <... mkdir resumed>) = 0 [pid 6711] creat("./file0", 000 [pid 6710] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6715] <... close resumed>) = 0 [pid 6711] <... creat resumed>) = 4 [pid 6710] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6715] symlink("/dev/binderfs", "./binderfs" [pid 6710] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6706] <... futex resumed>) = 0 [pid 6715] <... symlink resumed>) = 0 [pid 6711] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6710] creat("./file0", 000 [pid 6708] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6711] <... futex resumed>) = 0 [pid 6710] <... creat resumed>) = 4 [pid 6708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6706] <... futex resumed>) = 0 [pid 6715] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6711] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6710] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] <... futex resumed>) = 0 [pid 6712] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6708] <... futex resumed>) = 0 [pid 6706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6708] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6714] <... write resumed>) = 524288 [pid 6710] <... futex resumed>) = 0 [pid 6706] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6715] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6710] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 195.039556][ T6709] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.058539][ T6709] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6715] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6714] munmap(0x7eff79a00000, 138412032 [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6714] <... munmap resumed>) = 0 [pid 6705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6705] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... mmap resumed>) = 0x7eff81ead000 [pid 6705] <... futex resumed>) = 0 [pid 6705] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6714] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6705] <... mmap resumed>) = 0x7eff81e8c000 [pid 6714] <... openat resumed>) = 4 [pid 6714] ioctl(4, LOOP_SET_FD, 3 [pid 6705] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6705] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6715] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6712] <... mount resumed>) = 0 [pid 6715] <... mprotect resumed>) = 0 [pid 6712] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6705] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6705] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6712] <... openat resumed>) = 3 [pid 6714] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6716 attached [pid 6715] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6712] chdir("./file1" [pid 6708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6716] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6714] close(3 [pid 6708] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... clone3 resumed> => {parent_tid=[6716]}, 88) = 6716 [pid 6708] <... futex resumed>) = 0 [pid 6706] <... futex resumed>) = 0 [pid 6705] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6706] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] <... mmap resumed>) = 0x7eff81e8c000 [pid 6706] <... mmap resumed>) = 0x7eff81e8c000 [pid 6708] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6705] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6716] <... rseq resumed>) = 0 [pid 6714] <... close resumed>) = 0 [pid 6708] <... mprotect resumed>) = 0 [pid 6706] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6716] set_robust_list(0x7eff81eac9a0, 24 [pid 6705] <... futex resumed>) = 0 [pid 6716] <... set_robust_list resumed>) = 0 [pid 6714] close(4 [pid 6708] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6706] <... mprotect resumed>) = 0 [pid 6716] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6706] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6705] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6714] <... close resumed>) = 0 [pid 6708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6706] <... rt_sigprocmask resumed>[], 8) = 0 [ 195.085385][ T6711] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.087480][ T6710] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.104661][ T6714] loop0: detected capacity change from 0 to 1024 [ 195.111584][ T6709] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.112867][ T6711] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.119983][ T6710] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6716] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6714] mkdir("./file1", 0777 [pid 6706] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6714] <... mkdir resumed>) = 0 [pid 6712] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6717 attached [pid 6714] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6712] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6708] <... clone3 resumed> => {parent_tid=[6717]}, 88) = 6717 [pid 6717] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6715] <... clone3 resumed> => {parent_tid=[6719]}, 88) = 6719 [pid 6712] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6708] rt_sigprocmask(SIG_SETMASK, [], [pid 6706] <... clone3 resumed> => {parent_tid=[6718]}, 88) = 6718 [pid 6717] set_robust_list(0x7eff81eac9a0, 24 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], [pid 6712] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6706] rt_sigprocmask(SIG_SETMASK, [], [pid 6717] <... set_robust_list resumed>) = 0 [pid 6708] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6717] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] <... futex resumed>) = 0 [pid 6706] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6706] <... futex resumed>) = 0 [pid 6717] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6706] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6717] <... open resumed>) = 5 ./strace-static-x86_64: Process 6719 attached ./strace-static-x86_64: Process 6718 attached [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] <... futex resumed>) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6718] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6717] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6707] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6718] <... rseq resumed>) = 0 [pid 6715] <... futex resumed>) = 0 [pid 6712] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6707] <... futex resumed>) = 0 [pid 6719] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053) = 0 [pid 6717] <... futex resumed>) = 1 [pid 6716] <... open resumed>) = 5 [pid 6712] creat("./file0", 000 [pid 6708] <... futex resumed>) = 0 [pid 6707] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6717] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6716] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 195.146698][ T6709] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.162169][ T28] audit: type=1800 audit(1708423272.765:541): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 195.177932][ T6711] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6716] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6719] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6718] set_robust_list(0x7eff81eac9a0, 24 [pid 6715] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6712] <... creat resumed>) = 4 [pid 6719] rt_sigprocmask(SIG_SETMASK, [], [pid 6718] <... set_robust_list resumed>) = 0 [pid 6712] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6718] rt_sigprocmask(SIG_SETMASK, [], [pid 6714] <... mount resumed>) = 0 [pid 6712] <... futex resumed>) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6719] memfd_create("syzkaller", 0 [pid 6718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6707] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6719] <... memfd_create resumed>) = 3 [pid 6719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6718] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6707] <... futex resumed>) = 0 [ 195.202900][ T6710] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.203928][ T6709] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.210198][ T6710] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6714] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6714] chdir("./file1" [pid 6719] <... mmap resumed>) = 0x7eff79a00000 [pid 6714] <... chdir resumed>) = 0 [pid 6707] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6714] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6714] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6713] <... futex resumed>) = 0 [pid 6714] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6713] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] creat("./file0", 000 [pid 6713] <... futex resumed>) = 0 [pid 6714] <... creat resumed>) = 4 [pid 6713] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6714] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6713] <... futex resumed>) = 0 [ 195.243523][ T6711] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.250102][ T6712] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.275265][ T6714] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6713] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6713] <... futex resumed>) = 0 [pid 6713] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6719] <... write resumed>) = 524288 [ 195.282127][ T28] audit: type=1800 audit(1708423272.795:542): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 195.283913][ T6709] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.304186][ T6712] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.326508][ T6710] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.332214][ T6711] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6713] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] munmap(0x7eff79a00000, 138412032 [pid 6713] <... futex resumed>) = 0 [pid 6707] <... futex resumed>) = 0 [pid 6713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6719] <... munmap resumed>) = 0 [pid 6718] <... open resumed>) = 5 [pid 6713] <... mmap resumed>) = 0x7eff81e8c000 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6713] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6707] <... mmap resumed>) = 0x7eff81e8c000 [pid 6707] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6707] <... mprotect resumed>) = 0 [pid 6713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6707] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6720]}, 88) = 6720 [pid 6713] rt_sigprocmask(SIG_SETMASK, [], [pid 6719] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6718] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6707] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6718] <... futex resumed>) = 0 [pid 6713] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6719] <... openat resumed>) = 4 [pid 6718] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6713] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6721 attached ./strace-static-x86_64: Process 6720 attached [pid 6719] ioctl(4, LOOP_SET_FD, 3 [pid 6713] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6720] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6720] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6720] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6721] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6719] <... ioctl resumed>) = 0 [ 195.333871][ T6710] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.341064][ T6711] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.349213][ T6714] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.372789][ T6712] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.386752][ T6719] loop5: detected capacity change from 0 to 1024 [pid 6707] <... clone3 resumed> => {parent_tid=[6721]}, 88) = 6721 [pid 6721] <... rseq resumed>) = 0 [pid 6719] close(3 [pid 6709] <... write resumed>) = 53248 [pid 6709] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6709] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] exit_group(0 [pid 6716] <... futex resumed>) = ? [pid 6709] <... futex resumed>) = ? [pid 6705] <... exit_group resumed>) = ? [pid 6716] +++ exited with 0 +++ [pid 6709] +++ exited with 0 +++ [pid 6705] +++ exited with 0 +++ [pid 6721] set_robust_list(0x7eff81eac9a0, 24 [pid 6719] <... close resumed>) = 0 [pid 6721] <... set_robust_list resumed>) = 0 [pid 6719] close(4 [pid 6707] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6705, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5074] restart_syscall(<... resuming interrupted clone ...> [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] <... restart_syscall resumed>) = 0 [pid 6721] rt_sigprocmask(SIG_SETMASK, [], [pid 6719] <... close resumed>) = 0 [pid 6707] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6711] <... write resumed>) = 53248 [pid 6707] <... futex resumed>) = 0 [pid 6721] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6719] mkdir("./file1", 0777 [ 195.396012][ T28] audit: type=1800 audit(1708423272.855:543): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 195.428628][ T6712] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6721] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6707] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6719] <... mkdir resumed>) = 0 [pid 6711] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6711] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6721] <... open resumed>) = 5 [pid 6719] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6708] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6721] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... mount resumed>) = 0 [pid 6717] <... futex resumed>) = ? [pid 6711] <... futex resumed>) = ? [pid 6708] <... exit_group resumed>) = ? [pid 6721] <... futex resumed>) = 1 [pid 6719] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6717] +++ exited with 0 +++ [pid 6711] +++ exited with 0 +++ [pid 6708] +++ exited with 0 +++ [pid 6707] <... futex resumed>) = 0 [pid 6721] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6719] <... openat resumed>) = 3 [pid 5074] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6710] <... write resumed>) = 53248 [pid 5074] <... openat resumed>) = 3 [pid 6719] chdir("./file1" [pid 5074] newfstatat(3, "", [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6708, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6710] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6710] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6706] exit_group(0 [pid 6710] <... futex resumed>) = ? [pid 6706] <... exit_group resumed>) = ? [pid 6710] +++ exited with 0 +++ [ 195.451037][ T6712] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.460898][ T6714] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.460975][ T6712] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.476767][ T28] audit: type=1800 audit(1708423273.015:544): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 6719] <... chdir resumed>) = 0 [pid 6718] <... futex resumed>) = ? [pid 6712] <... write resumed>) = 53248 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6720] <... open resumed>) = 5 [pid 6720] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6720] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6719] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6719] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6719] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] +++ exited with 0 +++ [pid 6715] <... futex resumed>) = 0 [pid 6712] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] +++ exited with 0 +++ [pid 5074] getdents64(3, [pid 6715] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] <... futex resumed>) = 0 [pid 6715] <... futex resumed>) = 1 [pid 6712] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6715] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6706, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 6719] <... futex resumed>) = 0 [pid 6719] creat("./file0", 000) = 4 [pid 6719] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6719] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6707] exit_group(0 [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6721] <... futex resumed>) = ? [pid 6712] <... futex resumed>) = ? [pid 6707] <... exit_group resumed>) = ? [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6712] +++ exited with 0 +++ [pid 5073] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6721] +++ exited with 0 +++ [pid 6715] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5073] <... openat resumed>) = 3 [pid 6719] <... futex resumed>) = 0 [pid 6715] <... futex resumed>) = 1 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] newfstatat(3, "", [pid 6719] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6715] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] unlink("./90/binderfs" [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6707] +++ exited with 0 +++ [pid 5074] <... unlink resumed>) = 0 [pid 5073] getdents64(3, [pid 5072] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6707, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(3, "", [pid 5073] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] unlink("./89/binderfs" [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... unlink resumed>) = 0 [pid 5072] getdents64(3, [pid 5075] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5073] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] newfstatat(3, "", [pid 5072] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... umount2 resumed>) = 0 [pid 5072] unlink("./89/binderfs" [pid 5075] getdents64(3, [pid 5072] <... unlink resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 195.489200][ T6714] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.500644][ T28] audit: type=1800 audit(1708423273.055:545): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 195.523600][ T6714] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.540055][ T6714] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5075] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] unlink("./89/binderfs" [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./90/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./90/file1") = 0 [pid 6715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6714] <... write resumed>) = 53248 [pid 6715] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6713] exit_group(0 [pid 6715] <... futex resumed>) = 0 [pid 6714] <... futex resumed>) = 0 [pid 5074] getdents64(3, [pid 6720] <... futex resumed>) = ? [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6713] <... exit_group resumed>) = ? [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6720] +++ exited with 0 +++ [pid 6715] <... mmap resumed>) = 0x7eff81e8c000 [pid 6714] +++ exited with 0 +++ [pid 6715] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} => {parent_tid=[6722]}, 88) = 6722 [pid 5074] close(3 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], [pid 5074] <... close resumed>) = 0 [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5074] rmdir("./90" [pid 6715] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6713] +++ exited with 0 +++ [pid 5074] <... rmdir resumed>) = 0 [pid 6715] <... futex resumed>) = 0 [pid 5074] mkdir("./91", 0777 [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6713, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 6715] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 ./strace-static-x86_64: Process 6722 attached [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6722] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6722] set_robust_list(0x7eff81eac9a0, 24 [pid 5071] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6722] <... set_robust_list resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6722] rt_sigprocmask(SIG_SETMASK, [], [pid 5075] <... umount2 resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5075] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... openat resumed>) = 3 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(3, "", [pid 6722] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5075] newfstatat(AT_FDCWD, "./89/file1", [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = 0 [pid 5071] getdents64(3, [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5075] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 195.585401][ T6719] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.609769][ T6719] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] unlink("./91/binderfs" [pid 5075] <... openat resumed>) = 4 [pid 5075] newfstatat(4, "", [pid 5073] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... umount2 resumed>) = 0 [pid 5071] <... unlink resumed>) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6722] <... open resumed>) = 5 [pid 6715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5075] getdents64(4, [pid 5073] newfstatat(AT_FDCWD, "./89/file1", [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6722] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5072] newfstatat(AT_FDCWD, "./89/file1", [pid 6722] <... futex resumed>) = 0 [pid 5075] getdents64(4, [pid 5073] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6722] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] umount2("./89/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(4 [pid 5073] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 4 [pid 5072] openat(AT_FDCWD, "./89/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] rmdir("./89/file1" [pid 5073] newfstatat(4, "", [pid 5072] <... openat resumed>) = 4 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 195.632423][ T28] audit: type=1800 audit(1708423273.245:546): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 195.634902][ T6719] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.662700][ T6719] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5072] newfstatat(4, "", [pid 5075] getdents64(3, [pid 5073] getdents64(4, [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] getdents64(4, [pid 5075] close(3 [pid 5073] getdents64(4, [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5075] <... close resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(4, [pid 5075] rmdir("./89" [pid 5074] <... ioctl resumed>) = 0 [pid 5073] close(4 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... rmdir resumed>) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] close(4 [pid 5075] mkdir("./90", 0777 [pid 5073] rmdir("./89/file1" [pid 5072] <... close resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] rmdir("./89/file1" [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5073] getdents64(3, [pid 5072] <... rmdir resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5072] getdents64(3, [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5073] close(3 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] close(3 [pid 5073] rmdir("./89" [pid 5072] <... close resumed>) = 0 [pid 5073] <... rmdir resumed>) = 0 [pid 5072] rmdir("./89" [pid 5073] mkdir("./90", 0777 [pid 5072] <... rmdir resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5072] mkdir("./90", 0777 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... mkdir resumed>) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] ioctl(3, LOOP_CLR_FD [pid 5072] <... openat resumed>) = 3 [pid 5072] ioctl(3, LOOP_CLR_FD [pid 5071] <... umount2 resumed>) = 0 [pid 6719] <... write resumed>) = 53248 [pid 5074] close(3 [pid 6719] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] exit_group(0 [pid 5071] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6722] <... futex resumed>) = ? [pid 6719] <... futex resumed>) = ? [pid 6715] <... exit_group resumed>) = ? [pid 6722] +++ exited with 0 +++ [pid 5074] <... close resumed>) = 0 [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] newfstatat(AT_FDCWD, "./91/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6719] +++ exited with 0 +++ [pid 6715] +++ exited with 0 +++ [pid 5071] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6715, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5076] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5076] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5076] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(3, [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6723 attached [pid 5076] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] <... openat resumed>) = 4 [ 195.687501][ T6719] hfsplus: request for non-existent node 16777216 in B*Tree [ 195.695589][ T6719] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5076] newfstatat(AT_FDCWD, "./91/binderfs", [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6723 [pid 5071] newfstatat(4, "", [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5076] unlink("./91/binderfs" [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 5076] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] getdents64(4, [pid 6723] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6723] chdir("./91" [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6723] <... chdir resumed>) = 0 [pid 5071] getdents64(4, [pid 6723] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5071] close(4) = 0 [pid 5071] rmdir("./91/file1" [pid 6723] <... prctl resumed>) = 0 [pid 5076] <... umount2 resumed>) = 0 [pid 5071] <... rmdir resumed>) = 0 [pid 6723] setpgid(0, 0 [pid 5076] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6723] <... setpgid resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] newfstatat(AT_FDCWD, "./91/file1", [pid 6723] write(3, "1000", 4) = 4 [pid 5071] getdents64(3, [pid 6723] close(3) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] close(3 [pid 5071] close(3 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 6723] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] rmdir("./91" [pid 5076] <... openat resumed>) = 4 [pid 5071] <... rmdir resumed>) = 0 [pid 6723] <... futex resumed>) = 0 [pid 5076] newfstatat(4, "", [pid 6723] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] mkdir("./92", 0777 [pid 6723] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] getdents64(4, [pid 5071] <... mkdir resumed>) = 0 [pid 6723] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] getdents64(4, [pid 5071] <... openat resumed>) = 3 [pid 6723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6724 [pid 6723] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] close(4 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6723] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... close resumed>) = 0 ./strace-static-x86_64: Process 6724 attached [pid 6723] <... mprotect resumed>) = 0 [pid 5076] rmdir("./91/file1" [pid 5073] close(3 [pid 5072] <... ioctl resumed>) = 0 [pid 6724] set_robust_list(0x5555571ca6a0, 24 [pid 6723] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] <... rmdir resumed>) = 0 [pid 6724] <... set_robust_list resumed>) = 0 [pid 6723] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5073] <... close resumed>) = 0 [pid 5072] close(3 [pid 6724] chdir("./90" [pid 6723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} => {parent_tid=[6725]}, 88) = 6725 [pid 6723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6725 attached [pid 6723] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6723] <... futex resumed>) = 0 [pid 6725] <... rseq resumed>) = 0 [pid 6723] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6725] set_robust_list(0x7eff81ecd9a0, 24) = 0 [pid 6725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6725] memfd_create("syzkaller", 0) = 3 [pid 6725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6724] <... chdir resumed>) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5076] getdents64(3, [pid 5072] <... close resumed>) = 0 [pid 6724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6724] <... prctl resumed>) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6724] setpgid(0, 0 [pid 5076] close(3 [pid 6724] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6727 attached ./strace-static-x86_64: Process 6726 attached [pid 6724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6727 [pid 6726] set_robust_list(0x5555571ca6a0, 24 [pid 5076] <... close resumed>) = 0 [pid 6726] <... set_robust_list resumed>) = 0 [pid 6724] <... openat resumed>) = 3 [pid 6726] chdir("./90" [pid 6727] set_robust_list(0x5555571ca6a0, 24 [pid 6724] write(3, "1000", 4 [pid 5076] rmdir("./91" [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6726 [pid 6727] <... set_robust_list resumed>) = 0 [pid 6724] <... write resumed>) = 4 [pid 6726] <... chdir resumed>) = 0 [pid 6726] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6724] close(3 [pid 5076] <... rmdir resumed>) = 0 [pid 6726] <... prctl resumed>) = 0 [pid 6727] chdir("./90" [pid 6724] <... close resumed>) = 0 [pid 5076] mkdir("./92", 0777 [pid 6727] <... chdir resumed>) = 0 [pid 6724] symlink("/dev/binderfs", "./binderfs" [pid 5076] <... mkdir resumed>) = 0 [pid 6727] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6726] setpgid(0, 0) = 0 [pid 6727] <... prctl resumed>) = 0 [pid 6724] <... symlink resumed>) = 0 [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] <... openat resumed>) = 3 [pid 6727] setpgid(0, 0) = 0 [pid 6724] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6726] <... openat resumed>) = 3 [pid 6727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6724] <... futex resumed>) = 0 [pid 6726] write(3, "1000", 4 [pid 6724] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6726] <... write resumed>) = 4 [pid 6727] <... openat resumed>) = 3 [pid 6725] <... write resumed>) = 524288 [pid 6724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6727] write(3, "1000", 4 [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] <... write resumed>) = 4 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6727] close(3 [pid 6726] close(3 [pid 6727] <... close resumed>) = 0 [pid 6724] <... mmap resumed>) = 0x7eff81ead000 [pid 6726] <... close resumed>) = 0 [pid 6727] symlink("/dev/binderfs", "./binderfs" [pid 6724] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6726] symlink("/dev/binderfs", "./binderfs" [pid 6727] <... symlink resumed>) = 0 [pid 6726] <... symlink resumed>) = 0 [pid 6727] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... mprotect resumed>) = 0 [pid 6727] <... futex resumed>) = 0 [pid 6726] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6725] munmap(0x7eff79a00000, 138412032 [pid 6724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6726] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6727] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6726] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6725] <... munmap resumed>) = 0 [pid 6724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6726] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6727] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5071] <... ioctl resumed>) = 0 [pid 6726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6725] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6725] <... openat resumed>) = 4 [pid 6727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5071] close(3 [pid 6726] <... mmap resumed>) = 0x7eff81ead000 [pid 6727] <... mmap resumed>) = 0x7eff81ead000 [pid 6725] ioctl(4, LOOP_SET_FD, 3 [pid 6724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5071] <... close resumed>) = 0 [pid 6726] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6727] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6726] <... mprotect resumed>) = 0 [pid 6727] <... mprotect resumed>) = 0 [pid 6724] <... clone3 resumed> => {parent_tid=[6728]}, 88) = 6728 [pid 6726] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6727] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6724] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6728 attached [pid 6726] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6727] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6728] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6724] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6724] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6730 attached ./strace-static-x86_64: Process 6729 attached [pid 6728] <... rseq resumed>) = 0 [pid 6724] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6730] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6729] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6728] set_robust_list(0x7eff81ecd9a0, 24 [pid 6726] <... clone3 resumed> => {parent_tid=[6730]}, 88) = 6730 [pid 6730] <... rseq resumed>) = 0 [pid 6729] <... rseq resumed>) = 0 [pid 6728] <... set_robust_list resumed>) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [], [pid 6727] <... clone3 resumed> => {parent_tid=[6729]}, 88) = 6729 [pid 6730] set_robust_list(0x7eff81ecd9a0, 24 [pid 6729] set_robust_list(0x7eff81ecd9a0, 24 [pid 6728] rt_sigprocmask(SIG_SETMASK, [], [pid 6726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] rt_sigprocmask(SIG_SETMASK, [], [pid 6730] <... set_robust_list resumed>) = 0 [pid 6729] <... set_robust_list resumed>) = 0 [pid 6728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6726] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6730] rt_sigprocmask(SIG_SETMASK, [], [pid 6729] rt_sigprocmask(SIG_SETMASK, [], [pid 6728] memfd_create("syzkaller", 0 [pid 6726] <... futex resumed>) = 0 [pid 6727] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6731 ./strace-static-x86_64: Process 6731 attached [pid 6730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6726] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6727] <... futex resumed>) = 0 [pid 6725] <... ioctl resumed>) = 0 [pid 6731] set_robust_list(0x5555571ca6a0, 24 [pid 6730] memfd_create("syzkaller", 0 [pid 6729] memfd_create("syzkaller", 0 [pid 6728] <... memfd_create resumed>) = 3 [pid 6727] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6725] close(3 [pid 6731] <... set_robust_list resumed>) = 0 [pid 6730] <... memfd_create resumed>) = 3 [pid 6729] <... memfd_create resumed>) = 3 [pid 6728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6725] <... close resumed>) = 0 [pid 6731] chdir("./92" [pid 6730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6725] close(4 [pid 6731] <... chdir resumed>) = 0 [pid 6730] <... mmap resumed>) = 0x7eff79a00000 [pid 6729] <... mmap resumed>) = 0x7eff79a00000 [pid 6728] <... mmap resumed>) = 0x7eff79a00000 [pid 6725] <... close resumed>) = 0 [pid 6731] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6725] mkdir("./file1", 0777 [pid 6729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6731] <... prctl resumed>) = 0 [pid 6728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6731] setpgid(0, 0 [pid 6725] <... mkdir resumed>) = 0 [pid 6731] <... setpgid resumed>) = 0 [ 195.901916][ T6725] loop3: detected capacity change from 0 to 1024 [pid 6731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6725] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6731] <... openat resumed>) = 3 [pid 5076] <... ioctl resumed>) = 0 [pid 6731] write(3, "1000", 4) = 4 [pid 6731] close(3) = 0 [pid 5076] close(3 [pid 6731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6730] <... write resumed>) = 524288 [pid 5076] <... close resumed>) = 0 [pid 6731] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6731] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6725] <... mount resumed>) = 0 [pid 6731] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6731] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6725] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6725] <... openat resumed>) = 3 [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81ead000 [pid 6729] <... write resumed>) = 524288 [pid 6725] chdir("./file1") = 0 [pid 6725] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6731] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6729] munmap(0x7eff79a00000, 138412032 [pid 6725] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6732 [pid 6730] munmap(0x7eff79a00000, 138412032./strace-static-x86_64: Process 6732 attached [pid 6731] <... mprotect resumed>) = 0 [pid 6729] <... munmap resumed>) = 0 [pid 6725] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] set_robust_list(0x5555571ca6a0, 24 [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6730] <... munmap resumed>) = 0 [pid 6728] <... write resumed>) = 524288 [pid 6725] <... futex resumed>) = 1 [pid 6723] <... futex resumed>) = 0 [pid 6732] <... set_robust_list resumed>) = 0 [pid 6731] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6729] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6728] munmap(0x7eff79a00000, 138412032 [pid 6723] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] chdir("./92" [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6729] <... openat resumed>) = 4 [pid 6725] creat("./file0", 000 [pid 6723] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6733 attached [pid 6732] <... chdir resumed>) = 0 [pid 6730] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6729] ioctl(4, LOOP_SET_FD, 3 [pid 6728] <... munmap resumed>) = 0 [pid 6725] <... creat resumed>) = 4 [pid 6723] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6732] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6731] <... clone3 resumed> => {parent_tid=[6733]}, 88) = 6733 [pid 6732] <... prctl resumed>) = 0 [pid 6731] rt_sigprocmask(SIG_SETMASK, [], [pid 6730] <... openat resumed>) = 4 [pid 6732] setpgid(0, 0 [pid 6731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] <... setpgid resumed>) = 0 [pid 6731] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6733] <... rseq resumed>) = 0 [pid 6732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6731] <... futex resumed>) = 0 [pid 6730] ioctl(4, LOOP_SET_FD, 3 [pid 6728] <... openat resumed>) = 4 [pid 6725] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] set_robust_list(0x7eff81ecd9a0, 24 [pid 6732] <... openat resumed>) = 3 [pid 6731] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6728] ioctl(4, LOOP_SET_FD, 3 [pid 6725] <... futex resumed>) = 1 [pid 6723] <... futex resumed>) = 0 [pid 6723] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] <... set_robust_list resumed>) = 0 [pid 6725] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6723] <... futex resumed>) = 0 [pid 6733] rt_sigprocmask(SIG_SETMASK, [], [pid 6723] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6733] memfd_create("syzkaller", 0) = 3 [pid 6733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6729] <... ioctl resumed>) = 0 [pid 6729] close(3) = 0 [pid 6729] close(4) = 0 [pid 6732] write(3, "1000", 4 [ 196.015497][ T6729] loop1: detected capacity change from 0 to 1024 [ 196.027639][ T6730] loop2: detected capacity change from 0 to 1024 [ 196.035510][ T6728] loop4: detected capacity change from 0 to 1024 [pid 6729] mkdir("./file1", 0777 [pid 6732] <... write resumed>) = 4 [pid 6730] <... ioctl resumed>) = 0 [pid 6729] <... mkdir resumed>) = 0 [pid 6732] close(3 [pid 6730] close(3 [pid 6733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6732] <... close resumed>) = 0 [pid 6729] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6732] symlink("/dev/binderfs", "./binderfs" [pid 6733] <... write resumed>) = 524288 [pid 6732] <... symlink resumed>) = 0 [pid 6728] <... ioctl resumed>) = 0 [pid 6732] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... close resumed>) = 0 [pid 6728] close(3 [pid 6730] close(4 [pid 6728] <... close resumed>) = 0 [pid 6732] <... futex resumed>) = 0 [pid 6732] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6728] close(4 [pid 6732] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6732] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6730] <... close resumed>) = 0 [pid 6728] <... close resumed>) = 0 [pid 6732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6728] mkdir("./file1", 0777 [pid 6732] <... mmap resumed>) = 0x7eff81ead000 [pid 6730] mkdir("./file1", 0777 [pid 6728] <... mkdir resumed>) = 0 [pid 6732] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6728] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6732] <... mprotect resumed>) = 0 [pid 6730] <... mkdir resumed>) = 0 [pid 6723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6730] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6723] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6723] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6729] <... mount resumed>) = 0 [pid 6728] <... mount resumed>) = 0 [pid 6723] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6732] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6728] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6723] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6732] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6730] <... mount resumed>) = 0 [ 196.061404][ T6725] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6729] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6728] <... openat resumed>) = 3 [pid 6723] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6733] munmap(0x7eff79a00000, 138412032 [pid 6732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6730] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6729] <... openat resumed>) = 3 [pid 6728] chdir("./file1"./strace-static-x86_64: Process 6734 attached [pid 6734] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6734] set_robust_list(0x7eff81eac9a0, 24 [pid 6733] <... munmap resumed>) = 0 [pid 6732] <... clone3 resumed> => {parent_tid=[6735]}, 88) = 6735 [pid 6730] <... openat resumed>) = 3 [pid 6729] chdir("./file1" [pid 6723] <... clone3 resumed> => {parent_tid=[6734]}, 88) = 6734 ./strace-static-x86_64: Process 6735 attached [pid 6734] <... set_robust_list resumed>) = 0 [pid 6732] rt_sigprocmask(SIG_SETMASK, [], [pid 6728] <... chdir resumed>) = 0 [pid 6723] rt_sigprocmask(SIG_SETMASK, [], [pid 6734] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6730] chdir("./file1" [pid 6729] <... chdir resumed>) = 0 [pid 6728] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6723] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... chdir resumed>) = 0 [pid 6729] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6728] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6723] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] <... rseq resumed>) = 0 [pid 6734] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6733] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6732] <... futex resumed>) = 0 [pid 6730] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6729] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6728] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6723] <... futex resumed>) = 0 [pid 6735] set_robust_list(0x7eff81ecd9a0, 24 [pid 6733] <... openat resumed>) = 4 [pid 6732] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6730] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6729] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6723] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] <... set_robust_list resumed>) = 0 [pid 6733] ioctl(4, LOOP_SET_FD, 3 [pid 6730] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... futex resumed>) = 1 [pid 6728] <... futex resumed>) = 1 [pid 6727] <... futex resumed>) = 0 [pid 6724] <... futex resumed>) = 0 [pid 6727] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6730] <... futex resumed>) = 1 [pid 6726] <... futex resumed>) = 0 [ 196.109892][ T6725] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.131249][ T28] audit: type=1800 audit(1708423273.745:547): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 196.132811][ T6725] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6730] creat("./file0", 000 [pid 6726] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6724] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] rt_sigprocmask(SIG_SETMASK, [], [pid 6730] <... creat resumed>) = 4 [pid 6729] creat("./file0", 000 [pid 6728] creat("./file0", 000 [pid 6724] <... futex resumed>) = 0 [pid 6735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] memfd_create("syzkaller", 0 [pid 6729] <... creat resumed>) = 4 [pid 6728] <... creat resumed>) = 4 [pid 6724] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6735] <... memfd_create resumed>) = 3 [pid 6728] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6728] <... futex resumed>) = 1 [pid 6724] <... futex resumed>) = 0 [pid 6735] <... mmap resumed>) = 0x7eff79a00000 [pid 6730] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6724] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... futex resumed>) = 1 [pid 6729] <... futex resumed>) = 1 [pid 6726] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = 0 [pid 6730] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6729] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6726] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... futex resumed>) = 0 [pid 6729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6726] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = 0 [pid 6724] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6729] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6726] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6727] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] <... ioctl resumed>) = 0 [pid 6733] close(3) = 0 [pid 6733] close(4) = 0 [pid 6733] mkdir("./file1", 0777) = 0 [ 196.174989][ T6733] loop0: detected capacity change from 0 to 1024 [ 196.196705][ T6728] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.209828][ T6730] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 6733] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6726] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6726] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6726] <... futex resumed>) = 0 [pid 6727] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6727] <... futex resumed>) = 0 [pid 6726] <... mmap resumed>) = 0x7eff81e8c000 [pid 6727] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6726] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6727] <... mmap resumed>) = 0x7eff81e8c000 [pid 6726] <... mprotect resumed>) = 0 [pid 6727] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6726] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6727] <... mprotect resumed>) = 0 [pid 6727] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6726] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6727] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6726] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6727] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [ 196.219141][ T6729] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.226352][ T6728] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.228788][ T6725] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.252347][ T6730] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.262799][ T6728] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6726] <... clone3 resumed> => {parent_tid=[6736]}, 88) = 6736 [pid 6727] <... clone3 resumed> => {parent_tid=[6737]}, 88) = 6737 ./strace-static-x86_64: Process 6737 attached ./strace-static-x86_64: Process 6736 attached [pid 6734] <... open resumed>) = 5 [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6737] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6736] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6735] munmap(0x7eff79a00000, 138412032 [pid 6734] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6737] set_robust_list(0x7eff81eac9a0, 24 [pid 6727] rt_sigprocmask(SIG_SETMASK, [], [pid 6737] <... set_robust_list resumed>) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [], [pid 6727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6737] rt_sigprocmask(SIG_SETMASK, [], [pid 6726] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6727] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6726] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6737] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6726] <... futex resumed>) = 0 [pid 6726] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6734] <... futex resumed>) = 0 [pid 6733] <... mount resumed>) = 0 [pid 6724] <... futex resumed>) = 0 [pid 6736] <... rseq resumed>) = 0 [pid 6735] <... munmap resumed>) = 0 [pid 6734] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6733] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6733] <... openat resumed>) = 3 [pid 6733] chdir("./file1") = 0 [pid 6733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6736] set_robust_list(0x7eff81eac9a0, 24 [pid 6733] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... mmap resumed>) = 0x7eff81e8c000 [pid 6736] <... set_robust_list resumed>) = 0 [pid 6735] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6733] <... futex resumed>) = 1 [pid 6724] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6731] <... futex resumed>) = 0 [pid 6733] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6724] <... mprotect resumed>) = 0 [pid 6736] rt_sigprocmask(SIG_SETMASK, [], [pid 6735] <... openat resumed>) = 4 [pid 6733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6731] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6736] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6733] creat("./file0", 000 [pid 6731] <... futex resumed>) = 0 [pid 6724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6733] <... creat resumed>) = 4 [ 196.263402][ T6725] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.270404][ T6728] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.278665][ T6729] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.292473][ T6730] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.302647][ T6730] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6733] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6736] <... open resumed>) = 5 [pid 6733] <... futex resumed>) = 0 [pid 6731] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6733] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6736] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] ioctl(4, LOOP_SET_FD, 3 [pid 6731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6736] <... futex resumed>) = 1 [pid 6731] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6731] <... futex resumed>) = 1 [pid 6736] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6724] <... clone3 resumed> => {parent_tid=[6738]}, 88) = 6738 [pid 6731] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6733] <... futex resumed>) = 0 [ 196.320932][ T6730] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.320978][ T6725] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.332109][ T28] audit: type=1800 audit(1708423273.925:548): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor300" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 196.338520][ T6729] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.358371][ T6735] loop5: detected capacity change from 0 to 1024 [pid 6733] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 6738 attached [pid 6724] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6735] <... ioctl resumed>) = 0 [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6738] <... rseq resumed>) = 0 [pid 6735] close(3 [pid 6730] <... write resumed>) = 53248 [pid 6738] set_robust_list(0x7eff81eac9a0, 24 [pid 6735] <... close resumed>) = 0 [pid 6724] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6738] <... set_robust_list resumed>) = 0 [pid 6735] close(4 [pid 6730] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] <... write resumed>) = 53248 [pid 6724] <... futex resumed>) = 0 [pid 6726] exit_group(0) = ? [pid 6725] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6725] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6723] exit_group(0 [pid 6725] <... futex resumed>) = ? [pid 6723] <... exit_group resumed>) = ? [pid 6738] rt_sigprocmask(SIG_SETMASK, [], [pid 6736] <... futex resumed>) = ? [pid 6735] <... close resumed>) = 0 [pid 6734] <... futex resumed>) = ? [pid 6730] <... futex resumed>) = ? [pid 6725] +++ exited with 0 +++ [pid 6724] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6736] +++ exited with 0 +++ [pid 6734] +++ exited with 0 +++ [pid 6723] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6723, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5074] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] mkdir("./file1", 0777 [pid 6731] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6730] +++ exited with 0 +++ [pid 6726] +++ exited with 0 +++ [pid 5074] <... openat resumed>) = 3 [pid 6738] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6735] <... mkdir resumed>) = 0 [pid 6731] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(3, "", [pid 6735] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6731] <... futex resumed>) = 0 [pid 6731] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6726, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6731] <... mmap resumed>) = 0x7eff81e8c000 [pid 5074] getdents64(3, [pid 6731] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 5074] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5073] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6731] <... mprotect resumed>) = 0 [pid 5074] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6731] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 196.382850][ T6730] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.401881][ T6733] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.402177][ T6728] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6731] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6735] <... mount resumed>) = 0 [pid 5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] <... openat resumed>) = 3 [pid 5074] unlink("./91/binderfs" [pid 5073] newfstatat(3, "", [pid 5074] <... unlink resumed>) = 0 [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6738] <... open resumed>) = 5 [pid 6735] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6731] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6728] <... write resumed>) = 53248 [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6739 attached [pid 6738] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] <... openat resumed>) = 3 [pid 6728] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] getdents64(3, [pid 6739] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6738] <... futex resumed>) = 0 [pid 6735] chdir("./file1" [pid 6731] <... clone3 resumed> => {parent_tid=[6739]}, 88) = 6739 [pid 6728] <... futex resumed>) = 0 [pid 6739] <... rseq resumed>) = 0 [pid 6738] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6735] <... chdir resumed>) = 0 [pid 5073] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 6739] set_robust_list(0x7eff81eac9a0, 24 [pid 6735] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6731] rt_sigprocmask(SIG_SETMASK, [], [pid 6728] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6724] exit_group(0 [pid 5073] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6739] <... set_robust_list resumed>) = 0 [pid 6738] <... futex resumed>) = ? [pid 6735] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6728] <... futex resumed>) = ? [pid 6724] <... exit_group resumed>) = ? [pid 5074] <... umount2 resumed>) = 0 [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6739] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] +++ exited with 0 +++ [pid 6728] +++ exited with 0 +++ [pid 5073] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6735] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] +++ exited with 0 +++ [pid 5074] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6739] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6735] <... futex resumed>) = 1 [pid 6732] <... futex resumed>) = 0 [pid 6731] <... futex resumed>) = 0 [pid 5073] unlink("./90/binderfs" [ 196.452848][ T6728] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.458738][ T6733] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.467602][ T6729] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6732] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6724, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5073] <... unlink resumed>) = 0 [pid 6735] creat("./file0", 000 [pid 6732] <... futex resumed>) = 0 [pid 6731] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6732] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5073] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6735] <... creat resumed>) = 4 [pid 5075] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6739] <... open resumed>) = 5 [pid 6737] <... open resumed>) = 5 [pid 6735] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./91/file1", [pid 6739] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] <... futex resumed>) = 1 [pid 6732] <... futex resumed>) = 0 [pid 6739] <... futex resumed>) = 1 [pid 6737] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6732] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... futex resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6739] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6737] <... futex resumed>) = 0 [pid 6732] <... futex resumed>) = 0 [pid 5075] <... openat resumed>) = 3 [pid 5074] umount2("./91/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6737] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6732] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] newfstatat(3, "", [pid 5074] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] openat(AT_FDCWD, "./91/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5075] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] <... openat resumed>) = 4 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5074] newfstatat(4, "", [pid 5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5075] unlink("./90/binderfs" [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5075] <... unlink resumed>) = 0 [pid 5075] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [ 196.520555][ T6733] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.529457][ T6729] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.556363][ T6729] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5074] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5074] close(4) = 0 [pid 5074] rmdir("./91/file1") = 0 [pid 5074] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5074] close(3) = 0 [pid 5074] rmdir("./91") = 0 [pid 6732] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5074] mkdir("./92", 0777 [pid 6732] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] <... mkdir resumed>) = 0 [pid 6732] <... futex resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6732] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5075] <... umount2 resumed>) = 0 [pid 5074] <... openat resumed>) = 3 [pid 5073] <... umount2 resumed>) = 0 [pid 6732] <... mmap resumed>) = 0x7eff81e8c000 [pid 5075] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] ioctl(3, LOOP_CLR_FD [pid 6732] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5073] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6732] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5075] newfstatat(AT_FDCWD, "./90/file1", [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6732] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] newfstatat(AT_FDCWD, "./90/file1", [pid 6732] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6729] <... write resumed>) = 53248 [pid 5075] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6740 attached [ 196.564697][ T6735] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.565631][ T6733] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.578176][ T6735] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6729] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6740] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6732] <... clone3 resumed> => {parent_tid=[6740]}, 88) = 6740 [pid 6729] <... futex resumed>) = 0 [pid 6727] exit_group(0 [pid 5075] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6740] <... rseq resumed>) = 0 [pid 6732] rt_sigprocmask(SIG_SETMASK, [], [pid 6729] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5073] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5073] getdents64(4, 0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5073] close(4) = 0 [pid 5073] rmdir("./90/file1" [pid 6740] set_robust_list(0x7eff81eac9a0, 24 [pid 6737] <... futex resumed>) = ? [pid 6729] <... futex resumed>) = ? [pid 6727] <... exit_group resumed>) = ? [pid 5075] <... openat resumed>) = 4 [pid 5073] <... rmdir resumed>) = 0 [pid 6737] +++ exited with 0 +++ [pid 6729] +++ exited with 0 +++ [pid 5073] getdents64(3, 0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5073] close(3) = 0 [pid 5073] rmdir("./90") = 0 [pid 5073] mkdir("./91", 0777 [pid 6740] <... set_robust_list resumed>) = 0 [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] +++ exited with 0 +++ [pid 5075] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6727, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6740] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] restart_syscall(<... resuming interrupted clone ...> [pid 5075] getdents64(4, [pid 6740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] <... futex resumed>) = 0 [pid 6740] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6732] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5072] <... restart_syscall resumed>) = 0 [pid 5073] <... mkdir resumed>) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6740] <... open resumed>) = 5 [pid 6733] <... write resumed>) = 53248 [pid 5075] getdents64(4, [pid 5073] <... openat resumed>) = 3 [ 196.618468][ T6733] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.618713][ T6735] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.641116][ T6733] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.657642][ T6735] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6740] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] ioctl(3, LOOP_CLR_FD [pid 6733] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6733] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... ioctl resumed>) = 0 [pid 6740] <... futex resumed>) = 1 [pid 6732] <... futex resumed>) = 0 [pid 5075] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5074] close(3 [pid 6740] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6735] <... write resumed>) = 53248 [pid 6731] exit_group(0 [pid 5075] close(4 [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6735] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6733] <... futex resumed>) = ? [pid 6731] <... exit_group resumed>) = ? [pid 5075] <... close resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6739] <... futex resumed>) = ? [pid 6735] <... futex resumed>) = 0 [pid 6733] +++ exited with 0 +++ [pid 5075] rmdir("./90/file1" [pid 5074] <... close resumed>) = 0 [pid 6732] exit_group(0 [pid 5075] <... rmdir resumed>) = 0 [pid 5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... openat resumed>) = 3 [pid 6732] <... exit_group resumed>) = ? [pid 5075] getdents64(3, [pid 6740] <... futex resumed>) = ? [pid 5072] newfstatat(3, "", [pid 6740] +++ exited with 0 +++ [pid 5075] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6735] +++ exited with 0 +++ [pid 5075] close(3 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5074] <... clone resumed>, child_tidptr=0x5555571ca690) = 6741 [pid 6739] +++ exited with 0 +++ [pid 6731] +++ exited with 0 +++ [pid 5075] <... close resumed>) = 0 [pid 5072] getdents64(3, [pid 5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6731, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5071] restart_syscall(<... resuming interrupted clone ...> [pid 5075] rmdir("./90" [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5071] <... restart_syscall resumed>) = 0 [pid 5072] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6741 attached [pid 6741] set_robust_list(0x5555571ca6a0, 24 [pid 5075] <... rmdir resumed>) = 0 [pid 5071] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6741] <... set_robust_list resumed>) = 0 [pid 6732] +++ exited with 0 +++ [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6741] chdir("./92" [pid 5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6732, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5075] mkdir("./91", 0777 [pid 5072] newfstatat(AT_FDCWD, "./90/binderfs", [pid 5071] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6741] <... chdir resumed>) = 0 [pid 5075] <... mkdir resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6741] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5072] unlink("./90/binderfs" [pid 5071] <... openat resumed>) = 3 [pid 6741] <... prctl resumed>) = 0 [pid 5076] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5075] <... openat resumed>) = 3 [pid 5072] <... unlink resumed>) = 0 [pid 5071] newfstatat(3, "", [pid 6741] setpgid(0, 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5075] ioctl(3, LOOP_CLR_FD [pid 5072] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6741] <... setpgid resumed>) = 0 [pid 5076] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] <... openat resumed>) = 3 [ 196.677080][ T6735] hfsplus: request for non-existent node 16777216 in B*Tree [ 196.688457][ T6735] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5071] getdents64(3, [pid 6741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5076] newfstatat(3, "", [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... umount2 resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] newfstatat(AT_FDCWD, "./90/file1", [pid 5071] newfstatat(AT_FDCWD, "./92/binderfs", [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6741] <... openat resumed>) = 3 [pid 5072] umount2("./90/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6741] write(3, "1000", 4 [pid 5076] getdents64(3, [pid 5072] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] openat(AT_FDCWD, "./90/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] unlink("./92/binderfs" [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5072] <... openat resumed>) = 4 [pid 6741] <... write resumed>) = 4 [pid 5072] newfstatat(4, "", [pid 5071] <... unlink resumed>) = 0 [pid 6741] close(3 [pid 5076] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] <... ioctl resumed>) = 0 [pid 5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6741] <... close resumed>) = 0 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] close(3 [pid 6741] symlink("/dev/binderfs", "./binderfs" [pid 5076] newfstatat(AT_FDCWD, "./92/binderfs", [pid 5073] <... close resumed>) = 0 [pid 6741] <... symlink resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6741] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] unlink("./92/binderfs" [pid 6741] <... futex resumed>) = 0 [pid 5076] <... unlink resumed>) = 0 [pid 6741] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] getdents64(4, ./strace-static-x86_64: Process 6742 attached [pid 6741] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5073] <... clone resumed>, child_tidptr=0x5555571ca690) = 6742 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 6742] set_robust_list(0x5555571ca6a0, 24 [pid 6741] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5072] getdents64(4, [pid 6741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5072] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5072] close(4 [pid 6741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 6741] <... mmap resumed>) = 0x7eff81ead000 [pid 6741] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6741] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5072] rmdir("./90/file1" [pid 6741] <... clone3 resumed> => {parent_tid=[6743]}, 88) = 6743 [pid 6741] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6743 attached NULL, 8) = 0 [pid 6743] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6741] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] <... set_robust_list resumed>) = 0 [pid 5072] <... rmdir resumed>) = 0 [pid 6743] <... rseq resumed>) = 0 [pid 6742] chdir("./91" [pid 6741] <... futex resumed>) = 0 [pid 5075] <... ioctl resumed>) = 0 [pid 5072] getdents64(3, [pid 6743] set_robust_list(0x7eff81ecd9a0, 24 [pid 6742] <... chdir resumed>) = 0 [pid 5075] close(3 [pid 5072] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6743] <... set_robust_list resumed>) = 0 [pid 6742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6741] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5072] close(3 [pid 6743] rt_sigprocmask(SIG_SETMASK, [], [pid 6742] <... prctl resumed>) = 0 [pid 5075] <... close resumed>) = 0 [pid 6743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6742] setpgid(0, 0 [pid 5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] <... close resumed>) = 0 [pid 6742] <... setpgid resumed>) = 0 [pid 6743] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6744 attached [pid 6742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5072] rmdir("./90" [pid 6743] <... memfd_create resumed>) = 3 [pid 6742] <... openat resumed>) = 3 [pid 6743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff79a00000 [pid 6744] set_robust_list(0x5555571ca6a0, 24 [pid 6742] write(3, "1000", 4 [pid 5075] <... clone resumed>, child_tidptr=0x5555571ca690) = 6744 [pid 5072] <... rmdir resumed>) = 0 [pid 6744] <... set_robust_list resumed>) = 0 [pid 6742] <... write resumed>) = 4 [pid 5076] <... umount2 resumed>) = 0 [pid 5072] mkdir("./91", 0777 [pid 6742] close(3 [pid 6744] chdir("./91" [pid 6743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6742] <... close resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 6742] symlink("/dev/binderfs", "./binderfs" [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6742] <... symlink resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... umount2 resumed>) = 0 [pid 5071] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5071] newfstatat(AT_FDCWD, "./92/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5076] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6744] <... chdir resumed>) = 0 [pid 6742] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] ioctl(3, LOOP_CLR_FD [pid 6742] <... futex resumed>) = 0 [pid 6744] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6742] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6744] <... prctl resumed>) = 0 [pid 6742] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] newfstatat(AT_FDCWD, "./92/file1", [pid 5071] openat(AT_FDCWD, "./92/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5071] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5071] getdents64(4, [pid 5076] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5076] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] getdents64(4, [pid 5076] openat(AT_FDCWD, "./92/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] <... openat resumed>) = 4 [pid 5071] close(4 [pid 5076] newfstatat(4, "", [pid 5071] <... close resumed>) = 0 [pid 5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5076] getdents64(4, 0x5555571d3770 /* 2 entries */, 32768) = 48 [pid 5071] rmdir("./92/file1" [pid 6744] setpgid(0, 0 [pid 6742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5076] getdents64(4, [pid 5071] <... rmdir resumed>) = 0 [pid 6744] <... setpgid resumed>) = 0 [pid 6742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571d3770 /* 0 entries */, 32768) = 0 [pid 5076] close(4 [pid 6744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5076] <... close resumed>) = 0 [pid 6742] <... mmap resumed>) = 0x7eff81ead000 [pid 5076] rmdir("./92/file1" [pid 5071] getdents64(3, [pid 6744] <... openat resumed>) = 3 [pid 6743] <... write resumed>) = 524288 [pid 6742] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 5076] <... rmdir resumed>) = 0 [pid 5071] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 6742] <... mprotect resumed>) = 0 [pid 5071] close(3 [pid 6742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5076] getdents64(3, [pid 5071] <... close resumed>) = 0 [pid 6744] write(3, "1000", 4 [pid 6742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5076] <... getdents64 resumed>0x5555571cb730 /* 0 entries */, 32768) = 0 [pid 5071] rmdir("./92" [pid 6744] <... write resumed>) = 4 [pid 6743] munmap(0x7eff79a00000, 138412032 [pid 6742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5076] close(3 [pid 5071] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6745 attached [pid 6744] close(3 [pid 6743] <... munmap resumed>) = 0 [pid 5076] <... close resumed>) = 0 [pid 6744] <... close resumed>) = 0 [pid 6742] <... clone3 resumed> => {parent_tid=[6745]}, 88) = 6745 [pid 6744] symlink("/dev/binderfs", "./binderfs" [pid 6742] rt_sigprocmask(SIG_SETMASK, [], [pid 6745] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 5076] rmdir("./92" [pid 5071] mkdir("./93", 0777 [pid 6745] <... rseq resumed>) = 0 [pid 6744] <... symlink resumed>) = 0 [pid 6743] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 6745] set_robust_list(0x7eff81ecd9a0, 24 [pid 6743] <... openat resumed>) = 4 [pid 6742] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... rmdir resumed>) = 0 [pid 6742] <... futex resumed>) = 0 [pid 6745] <... set_robust_list resumed>) = 0 [pid 6745] rt_sigprocmask(SIG_SETMASK, [], [pid 6743] ioctl(4, LOOP_SET_FD, 3 [pid 6745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6744] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5076] mkdir("./93", 0777 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6745] memfd_create("syzkaller", 0 [pid 6744] <... futex resumed>) = 0 [pid 6743] <... ioctl resumed>) = 0 [pid 5076] <... mkdir resumed>) = 0 [pid 6745] <... memfd_create resumed>) = 3 [pid 6744] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 5076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5071] <... openat resumed>) = 3 [pid 6743] close(3 [pid 6745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6744] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5076] <... openat resumed>) = 3 [pid 6745] <... mmap resumed>) = 0x7eff79a00000 [pid 5076] ioctl(3, LOOP_CLR_FD [pid 6744] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6743] <... close resumed>) = 0 [pid 5071] ioctl(3, LOOP_CLR_FD [pid 6744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6743] close(4 [pid 6744] <... mmap resumed>) = 0x7eff81ead000 [pid 6745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6744] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6743] <... close resumed>) = 0 [pid 6744] <... mprotect resumed>) = 0 [pid 6743] mkdir("./file1", 0777 [pid 6745] <... write resumed>) = 524288 [pid 6744] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6743] <... mkdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 6745] munmap(0x7eff79a00000, 138412032 [pid 6744] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6743] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6745] <... munmap resumed>) = 0 [pid 6745] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 5072] close(3 [pid 6745] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6746 attached [pid 5072] <... close resumed>) = 0 [ 196.860860][ T6743] loop3: detected capacity change from 0 to 1024 [pid 6745] ioctl(4, LOOP_SET_FD, 3 [pid 5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6746] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6744] <... clone3 resumed> => {parent_tid=[6746]}, 88) = 6746 [pid 6744] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6744] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] <... rseq resumed>) = 0 [pid 6744] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] <... ioctl resumed>) = 0 [pid 6746] set_robust_list(0x7eff81ecd9a0, 24 [pid 5072] <... clone resumed>, child_tidptr=0x5555571ca690) = 6747 [pid 5076] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6747 attached [pid 6747] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6746] <... set_robust_list resumed>) = 0 [pid 6747] chdir("./91") = 0 [pid 6747] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6747] setpgid(0, 0) = 0 [pid 6747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6746] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6747] <... openat resumed>) = 3 [pid 6745] <... ioctl resumed>) = 0 [pid 6747] write(3, "1000", 4 [pid 6745] close(3 [pid 5076] close(3 [pid 6747] <... write resumed>) = 4 [pid 6745] <... close resumed>) = 0 [pid 6747] close(3 [pid 6745] close(4 [pid 5076] <... close resumed>) = 0 [pid 6747] <... close resumed>) = 0 [pid 6746] memfd_create("syzkaller", 0 [pid 6745] <... close resumed>) = 0 [pid 5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6747] symlink("/dev/binderfs", "./binderfs" [pid 6746] <... memfd_create resumed>) = 3 [pid 6745] mkdir("./file1", 0777 [pid 6743] <... mount resumed>) = 0 [pid 6746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6745] <... mkdir resumed>) = 0 [pid 6743] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6746] <... mmap resumed>) = 0x7eff79a00000 [pid 6743] <... openat resumed>) = 3 [pid 6747] <... symlink resumed>) = 0 [pid 6743] chdir("./file1" [pid 6747] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6743] <... chdir resumed>) = 0 [pid 6747] <... futex resumed>) = 0 [pid 6743] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6747] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6743] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6747] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6745] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6743] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6748 attached [pid 6747] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6743] <... futex resumed>) = 1 [pid 6741] <... futex resumed>) = 0 [pid 6748] set_robust_list(0x5555571ca6a0, 24 [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6743] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6741] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5076] <... clone resumed>, child_tidptr=0x5555571ca690) = 6748 [pid 6748] <... set_robust_list resumed>) = 0 [pid 6747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6743] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6741] <... futex resumed>) = 0 [pid 6748] chdir("./93" [pid 6747] <... mmap resumed>) = 0x7eff81ead000 [ 196.916431][ T6745] loop2: detected capacity change from 0 to 1024 [pid 6743] creat("./file0", 000 [pid 6748] <... chdir resumed>) = 0 [pid 6747] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE [pid 6743] <... creat resumed>) = 4 [pid 6741] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6747] <... mprotect resumed>) = 0 [pid 6748] <... prctl resumed>) = 0 [pid 6747] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6748] setpgid(0, 0 [pid 6743] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] close(3 [pid 6748] <... setpgid resumed>) = 0 [pid 6747] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5071] <... close resumed>) = 0 [pid 6748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6743] <... futex resumed>) = 1 [pid 6741] <... futex resumed>) = 0 [pid 5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6749 attached [pid 6748] <... openat resumed>) = 3 [pid 6743] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6741] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6741] <... futex resumed>) = 0 [pid 6741] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6749] <... rseq resumed>) = 0 [pid 6748] write(3, "1000", 4 [pid 6747] <... clone3 resumed> => {parent_tid=[6749]}, 88) = 6749 [pid 6749] set_robust_list(0x7eff81ecd9a0, 24 [pid 6748] <... write resumed>) = 4 [pid 6749] <... set_robust_list resumed>) = 0 [pid 6748] close(3 [pid 6747] rt_sigprocmask(SIG_SETMASK, [], [pid 6749] rt_sigprocmask(SIG_SETMASK, [], [pid 6748] <... close resumed>) = 0 [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5071] <... clone resumed>, child_tidptr=0x5555571ca690) = 6750 [pid 6749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6748] symlink("/dev/binderfs", "./binderfs" [pid 6747] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6750 attached [pid 6749] memfd_create("syzkaller", 0 [pid 6748] <... symlink resumed>) = 0 [pid 6747] <... futex resumed>) = 0 [pid 6745] <... mount resumed>) = 0 [pid 6750] set_robust_list(0x5555571ca6a0, 24) = 0 [pid 6749] <... memfd_create resumed>) = 3 [pid 6748] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6746] <... write resumed>) = 524288 [pid 6748] <... futex resumed>) = 0 [pid 6745] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6750] chdir("./93" [pid 6749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6745] <... openat resumed>) = 3 [pid 6750] <... chdir resumed>) = 0 [pid 6749] <... mmap resumed>) = 0x7eff79a00000 [pid 6748] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, [pid 6750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6748] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6746] munmap(0x7eff79a00000, 138412032 [pid 6745] chdir("./file1" [pid 6750] <... prctl resumed>) = 0 [pid 6750] setpgid(0, 0 [pid 6745] <... chdir resumed>) = 0 [pid 6750] <... setpgid resumed>) = 0 [pid 6748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6745] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6746] <... munmap resumed>) = 0 [pid 6745] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6745] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] <... mmap resumed>) = 0x7eff81ead000 [pid 6748] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6748] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6745] <... futex resumed>) = 1 [pid 6742] <... futex resumed>) = 0 [pid 6750] <... openat resumed>) = 3 [pid 6748] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6745] creat("./file0", 000 [pid 6742] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6745] <... creat resumed>) = 4 ./strace-static-x86_64: Process 6751 attached [pid 6748] <... clone3 resumed> => {parent_tid=[6751]}, 88) = 6751 [pid 6745] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6751] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6750] write(3, "1000", 4 [pid 6748] rt_sigprocmask(SIG_SETMASK, [], [pid 6746] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6745] <... futex resumed>) = 0 [pid 6742] <... futex resumed>) = 0 [pid 6751] <... rseq resumed>) = 0 [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6746] <... openat resumed>) = 4 [pid 6750] <... write resumed>) = 4 [pid 6745] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6742] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6751] set_robust_list(0x7eff81ecd9a0, 24 [pid 6748] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6741] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6751] <... set_robust_list resumed>) = 0 [pid 6748] <... futex resumed>) = 0 [pid 6751] rt_sigprocmask(SIG_SETMASK, [], [pid 6750] close(3 [pid 6748] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6746] ioctl(4, LOOP_SET_FD, 3 [pid 6742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6741] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6751] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 197.011695][ T6743] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6750] <... close resumed>) = 0 [pid 6745] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6742] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6741] <... futex resumed>) = 0 [pid 6751] memfd_create("syzkaller", 0 [pid 6745] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6741] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6751] <... memfd_create resumed>) = 3 [pid 6741] <... mmap resumed>) = 0x7eff81e8c000 [pid 6751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6741] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6751] <... mmap resumed>) = 0x7eff79a00000 [pid 6750] symlink("/dev/binderfs", "./binderfs" [pid 6742] <... futex resumed>) = 0 [pid 6741] <... mprotect resumed>) = 0 [pid 6751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6741] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6742] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6741] <... rt_sigprocmask resumed>[], 8) = 0 [ 197.055827][ T6746] loop4: detected capacity change from 0 to 1024 [ 197.060077][ T6743] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.082491][ T6743] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.089818][ T6743] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6750] <... symlink resumed>) = 0 [pid 6746] <... ioctl resumed>) = 0 [pid 6741] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6750] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6746] close(3 [pid 6750] rt_sigaction(SIGRT_1, {sa_handler=0x7eff81f36fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7eff81f28150}, NULL, 8) = 0 [pid 6750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6746] <... close resumed>) = 0 [pid 6749] <... write resumed>) = 524288 [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6746] close(4 [pid 6750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6746] <... close resumed>) = 0 [pid 6750] <... mmap resumed>) = 0x7eff81ead000 [pid 6749] munmap(0x7eff79a00000, 138412032 [pid 6746] mkdir("./file1", 0777 [pid 6750] mprotect(0x7eff81eae000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6749] <... munmap resumed>) = 0 [pid 6746] <... mkdir resumed>) = 0 [pid 6750] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6741] <... clone3 resumed> => {parent_tid=[6752]}, 88) = 6752 [pid 6750] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6746] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81ecd990, parent_tid=0x7eff81ecd990, exit_signal=0, stack=0x7eff81ead000, stack_size=0x20300, tls=0x7eff81ecd6c0} [pid 6749] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6741] rt_sigprocmask(SIG_SETMASK, [], [pid 6749] <... openat resumed>) = 4 [pid 6741] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6752 attached [pid 6749] ioctl(4, LOOP_SET_FD, 3 [pid 6741] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6750] <... clone3 resumed> => {parent_tid=[6753]}, 88) = 6753 [pid 6749] <... ioctl resumed>) = 0 [pid 6742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6741] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6753 attached [pid 6750] rt_sigprocmask(SIG_SETMASK, [], [pid 6753] rseq(0x7eff81ecdfe0, 0x20, 0, 0x53053053 [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6742] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6741] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6753] <... rseq resumed>) = 0 [pid 6750] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] <... futex resumed>) = 0 [pid 6753] set_robust_list(0x7eff81ecd9a0, 24 [pid 6750] <... futex resumed>) = 0 [pid 6742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6753] <... set_robust_list resumed>) = 0 [pid 6751] <... write resumed>) = 524288 [pid 6750] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6742] <... mmap resumed>) = 0x7eff81e8c000 [pid 6753] rt_sigprocmask(SIG_SETMASK, [], [pid 6752] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6742] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6753] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] <... rseq resumed>) = 0 [pid 6742] <... mprotect resumed>) = 0 [pid 6753] memfd_create("syzkaller", 0 [pid 6752] set_robust_list(0x7eff81eac9a0, 24 [pid 6742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6753] <... memfd_create resumed>) = 3 [pid 6752] <... set_robust_list resumed>) = 0 [pid 6742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6752] rt_sigprocmask(SIG_SETMASK, [], [pid 6742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0}./strace-static-x86_64: Process 6754 attached [pid 6751] munmap(0x7eff79a00000, 138412032 [pid 6752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6751] <... munmap resumed>) = 0 [pid 6742] <... clone3 resumed> => {parent_tid=[6754]}, 88) = 6754 [pid 6754] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6742] rt_sigprocmask(SIG_SETMASK, [], [pid 6754] <... rseq resumed>) = 0 [pid 6753] <... mmap resumed>) = 0x7eff79a00000 [pid 6752] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6751] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6749] close(3 [pid 6751] <... openat resumed>) = 4 [pid 6749] <... close resumed>) = 0 [pid 6754] set_robust_list(0x7eff81eac9a0, 24 [pid 6751] ioctl(4, LOOP_SET_FD, 3 [pid 6749] close(4 [pid 6742] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6754] <... set_robust_list resumed>) = 0 [pid 6749] <... close resumed>) = 0 [ 197.099678][ T6745] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.124829][ T6749] loop1: detected capacity change from 0 to 1024 [ 197.140797][ T6745] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6749] mkdir("./file1", 0777 [pid 6746] <... mount resumed>) = 0 [pid 6742] <... futex resumed>) = 0 [pid 6754] rt_sigprocmask(SIG_SETMASK, [], [pid 6749] <... mkdir resumed>) = 0 [pid 6742] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6749] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6746] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6754] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6746] <... openat resumed>) = 3 [pid 6741] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6749] <... mount resumed>) = 0 [pid 6746] chdir("./file1" [pid 6751] <... ioctl resumed>) = 0 [pid 6751] close(3) = 0 [pid 6749] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6751] close(4 [pid 6749] <... openat resumed>) = 3 [pid 6751] <... close resumed>) = 0 [pid 6742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6746] <... chdir resumed>) = 0 [pid 6751] mkdir("./file1", 0777 [pid 6749] chdir("./file1" [pid 6751] <... mkdir resumed>) = 0 [pid 6749] <... chdir resumed>) = 0 [ 197.167057][ T6751] loop5: detected capacity change from 0 to 1024 [ 197.184223][ T6743] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.193730][ T6745] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.201041][ T6745] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6753] <... write resumed>) = 524288 [pid 6746] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6751] mount("/dev/loop5", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6749] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6749] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6753] munmap(0x7eff79a00000, 138412032 [pid 6751] <... mount resumed>) = 0 [pid 6746] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 6751] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 6753] <... munmap resumed>) = 0 [pid 6751] <... openat resumed>) = 3 [pid 6749] <... futex resumed>) = 1 [pid 6747] <... futex resumed>) = 0 [pid 6746] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6753] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6751] chdir("./file1" [pid 6749] creat("./file0", 000 [pid 6747] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6746] <... futex resumed>) = 1 [pid 6744] <... futex resumed>) = 0 [pid 6753] <... openat resumed>) = 4 [pid 6752] <... open resumed>) = 5 [pid 6751] <... chdir resumed>) = 0 [pid 6749] <... creat resumed>) = 4 [pid 6747] <... futex resumed>) = 0 [pid 6746] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6744] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6743] <... write resumed>) = 53248 [pid 6753] ioctl(4, LOOP_SET_FD, 3 [pid 6752] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6743] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = 0 [pid 6741] exit_group(0 [pid 6744] <... futex resumed>) = 0 [pid 6741] <... exit_group resumed>) = ? [pid 6752] +++ exited with 0 +++ [pid 6744] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6751] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 6749] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6747] <... futex resumed>) = 0 [pid 6749] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6747] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [ 197.221052][ T6743] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.254013][ T6745] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.264003][ T6753] loop0: detected capacity change from 0 to 1024 [pid 6751] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] <... futex resumed>) = 0 [pid 6746] creat("./file0", 000 [pid 6743] <... futex resumed>) = ? [pid 6753] <... ioctl resumed>) = 0 [pid 6751] <... futex resumed>) = 1 [pid 6748] <... futex resumed>) = 0 [pid 6751] creat("./file0", 000 [pid 6748] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6751] <... creat resumed>) = 4 [pid 6748] <... futex resumed>) = 0 [pid 6751] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6751] <... futex resumed>) = 0 [pid 6748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6751] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6748] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 197.270266][ T6749] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.271044][ T6754] ------------[ cut here ]------------ [ 197.283510][ T6754] WARNING: CPU: 0 PID: 6754 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x3db/0x520 [ 197.294318][ T6754] Modules linked in: [ 197.299499][ T6754] CPU: 0 PID: 6754 Comm: syz-executor300 Not tainted 6.8.0-rc5-syzkaller #0 [ 197.303969][ T6751] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6748] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6744] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6744] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7eff81e8c000 [pid 6744] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6744] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6744] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6747] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6747] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... clone3 resumed> => {parent_tid=[6755]}, 88) = 6755 [pid 6747] <... futex resumed>) = 0 [pid 6744] rt_sigprocmask(SIG_SETMASK, [], [pid 6747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6746] <... creat resumed>) = 4 [pid 6744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6747] <... mmap resumed>) = 0x7eff81e8c000 [pid 6746] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [ 197.308274][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 197.325657][ T6754] RIP: 0010:hfsplus_free_extents+0x3db/0x520 [ 197.329915][ T6749] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.332120][ T6754] Code: 26 ff 8b 44 24 04 85 c0 0f 84 34 fe ff ff e8 dc 69 26 ff 48 c7 c7 60 78 28 8b e8 60 54 08 ff e9 1e fe ff ff e8 c6 69 26 ff 90 <0f> 0b 90 e9 b1 fc ff ff e8 b8 69 26 ff 8b 14 24 8b 74 24 04 48 8b [ 197.360063][ T6754] RSP: 0018:ffffc9000b98f750 EFLAGS: 00010293 [pid 6744] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] mprotect(0x7eff81e8d000, 131072, PROT_READ|PROT_WRITE [pid 6746] <... futex resumed>) = 0 [pid 6744] <... futex resumed>) = 0 [pid 6747] <... mprotect resumed>) = 0 [pid 6746] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6744] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6747] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 ./strace-static-x86_64: Process 6755 attached [pid 6747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7eff81eac990, parent_tid=0x7eff81eac990, exit_signal=0, stack=0x7eff81e8c000, stack_size=0x20300, tls=0x7eff81eac6c0} [pid 6755] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053) = 0 [pid 6755] set_robust_list(0x7eff81eac9a0, 24 [pid 6747] <... clone3 resumed> => {parent_tid=[6756]}, 88) = 6756 [pid 6755] <... set_robust_list resumed>) = 0 [pid 6747] rt_sigprocmask(SIG_SETMASK, [], [pid 6755] rt_sigprocmask(SIG_SETMASK, [], [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6756 attached [pid 6755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6747] futex(0x7eff81f996d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6756] rseq(0x7eff81eacfe0, 0x20, 0, 0x53053053 [pid 6755] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6747] <... futex resumed>) = 0 [pid 6756] <... rseq resumed>) = 0 [pid 6747] futex(0x7eff81f996dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6756] set_robust_list(0x7eff81eac9a0, 24) = 0 [pid 6756] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 197.366303][ T6754] RAX: 0000000000000000 RBX: ffff88806a8a0018 RCX: ffffffff826604eb [ 197.375598][ T6754] RDX: ffff88802a843b80 RSI: ffffffff8266083a RDI: 0000000000000001 [ 197.383669][ T6754] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 197.391682][ T6754] R10: 0000000000000001 R11: 0000000000000000 R12: 000000001b310001 [ 197.400112][ T6754] R13: 0000000000000000 R14: ffff888029c98000 R15: dffffc0000000000 [ 197.404443][ T6755] hfsplus: request for non-existent node 16777216 in B*Tree [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6756] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6744] futex(0x7eff81f996c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6746] <... futex resumed>) = 0 [pid 6744] <... futex resumed>) = 1 [pid 6744] futex(0x7eff81f996cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6746] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 6747] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 197.408178][ T6754] FS: 00007eff81eac6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 197.417544][ T6749] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.425413][ T6754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.439719][ T6754] CR2: 00007eff79a7fc00 CR3: 000000002a9b8000 CR4: 0000000000350ef0 [ 197.444040][ T6755] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.448075][ T6754] Call Trace: [ 197.459768][ T6754] [ 197.462857][ T6754] ? show_regs+0x8f/0xa0 [ 197.467183][ T6754] ? __warn+0xe6/0x390 [ 197.471316][ T6754] ? hfsplus_free_extents+0x3db/0x520 [ 197.476779][ T6754] ? report_bug+0x3c0/0x580 [ 197.481361][ T6754] ? handle_bug+0x3d/0x70 [ 197.482182][ T6745] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.485759][ T6754] ? exc_invalid_op+0x17/0x50 [ 197.497748][ T6754] ? asm_exc_invalid_op+0x1a/0x20 [ 197.502896][ T6754] ? hfsplus_free_extents+0x8b/0x520 [ 197.508248][ T6754] ? hfsplus_free_extents+0x3da/0x520 [ 197.513709][ T6754] ? hfsplus_free_extents+0x3db/0x520 [pid 6745] <... write resumed>) = 53248 [pid 6744] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6745] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 197.515025][ T6749] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.519117][ T6754] hfsplus_file_truncate+0x836/0x9e0 [ 197.532835][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.537762][ T6754] ? __up_read+0x1fc/0x760 [ 197.542290][ T6754] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 197.548158][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.548758][ T6755] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.553099][ T6754] ? inode_newsize_ok+0x13c/0x200 [ 197.553154][ T6754] ? srso_return_thunk+0x5/0x5f [pid 6745] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6756] <... open resumed>) = 5 [pid 6756] futex(0x7eff81f996dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 197.570412][ T6754] hfsplus_setattr+0x1eb/0x310 [ 197.575303][ T6754] ? __pfx_hfsplus_setattr+0x10/0x10 [ 197.575812][ T6755] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.580638][ T6754] notify_change+0x745/0x11c0 [ 197.592826][ T6754] do_truncate+0x15c/0x220 [ 197.593189][ T6749] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.597274][ T6754] ? __pfx_do_truncate+0x10/0x10 [ 197.597316][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.597376][ T6754] ? common_perm_cond+0x242/0x560 [pid 6756] futex(0x7eff81f996d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6746] <... open resumed>) = 5 [pid 6743] +++ exited with 0 +++ [pid 6741] +++ exited with 0 +++ [pid 5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6741, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5074] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6746] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5074] newfstatat(3, "", [pid 6746] <... futex resumed>) = 0 [pid 6746] futex(0x7eff81f996c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 197.620713][ T6754] path_openat+0x24c0/0x29a0 [ 197.625446][ T6754] ? __pfx_path_openat+0x10/0x10 [ 197.630458][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.635448][ T6754] ? __pfx___lock_acquire+0x10/0x10 [ 197.641877][ T6754] ? find_held_lock+0x2d/0x110 [ 197.646758][ T6754] do_filp_open+0x1de/0x440 [ 197.651312][ T6754] ? __pfx_do_filp_open+0x10/0x10 [ 197.656447][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.662692][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.667670][ T6754] ? srso_return_thunk+0x5/0x5f [pid 5074] getdents64(3, 0x5555571cb730 /* 4 entries */, 32768) = 112 [pid 5074] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5074] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5074] unlink("./92/binderfs") = 0 [pid 5074] umount2("./92/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6753] close(3) = 0 [ 197.673287][ T6754] ? _raw_spin_unlock+0x28/0x50 [ 197.679664][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.681063][ T6749] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.684926][ T6754] ? alloc_fd+0x2da/0x6c0 [ 197.696324][ T6754] do_sys_openat2+0x17a/0x1e0 [ 197.696860][ T6755] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.701047][ T6754] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.701127][ T6754] ? ptrace_notify+0xf4/0x140 [ 197.718781][ T6754] ? __pfx_lock_release+0x10/0x10 [pid 6753] close(4) = 0 [pid 6753] mkdir("./file1", 0777) = 0 [pid 6753] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 6749] <... write resumed>) = 53248 [pid 6749] futex(0x7eff81f996cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 197.724553][ T6754] __x64_sys_open+0x154/0x1e0 [ 197.729301][ T6754] ? __pfx___x64_sys_open+0x10/0x10 [ 197.735272][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.740948][ T6754] ? _raw_spin_unlock_irq+0x2e/0x50 [ 197.746240][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.751167][ T6754] ? ptrace_notify+0xf4/0x140 [ 197.755950][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.761009][ T6754] do_syscall_64+0xd8/0x270 [ 197.765745][ T6754] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 197.771711][ T6754] RIP: 0033:0x7eff81f10b89 [ 197.773451][ T6751] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.777034][ T6754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 197.783869][ T6751] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.803079][ T6754] RSP: 002b:00007eff81eac218 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 197.803123][ T6754] RAX: ffffffffffffffda RBX: 00007eff81f996d8 RCX: 00007eff81f10b89 [ 197.803152][ T6754] RDX: 0000000000000000 RSI: 0000000000004374 RDI: 0000000020000040 [ 197.803180][ T6754] RBP: 00007eff81f996d0 R08: 00007ffca8bee4b7 R09: 0000000000000000 [ 197.810475][ T6751] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.818857][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff81f650c0 [ 197.818885][ T6754] R13: 0031656c69662f2e R14: 0073756c70736668 R15: 6465646165726874 [ 197.818939][ T6754] [ 197.858340][ T6751] hfsplus: request for non-existent node 16777216 in B*Tree [ 197.866280][ T6754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.866298][ T6754] CPU: 0 PID: 6754 Comm: syz-executor300 Not tainted 6.8.0-rc5-syzkaller #0 [ 197.866338][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 197.866357][ T6754] Call Trace: [ 197.866369][ T6754] [ 197.866382][ T6754] dump_stack_lvl+0xd9/0x1b0 [ 197.866434][ T6754] panic+0x6ee/0x7a0 [ 197.866473][ T6754] ? __pfx_panic+0x10/0x10 [ 197.866508][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.866562][ T6754] ? show_trace_log_lvl+0x363/0x500 [ 197.866638][ T6754] ? check_panic_on_warn+0x1f/0xb0 [ 197.866682][ T6754] ? hfsplus_free_extents+0x3db/0x520 [ 197.866726][ T6754] check_panic_on_warn+0xab/0xb0 [ 197.866769][ T6754] __warn+0xf2/0x390 [ 197.866807][ T6754] ? hfsplus_free_extents+0x3db/0x520 [ 197.866846][ T6754] report_bug+0x3c0/0x580 [ 197.866899][ T6754] handle_bug+0x3d/0x70 [ 197.866935][ T6754] exc_invalid_op+0x17/0x50 [ 197.866973][ T6754] asm_exc_invalid_op+0x1a/0x20 [ 197.867025][ T6754] RIP: 0010:hfsplus_free_extents+0x3db/0x520 [ 197.867063][ T6754] Code: 26 ff 8b 44 24 04 85 c0 0f 84 34 fe ff ff e8 dc 69 26 ff 48 c7 c7 60 78 28 8b e8 60 54 08 ff e9 1e fe ff ff e8 c6 69 26 ff 90 <0f> 0b 90 e9 b1 fc ff ff e8 b8 69 26 ff 8b 14 24 8b 74 24 04 48 8b [ 197.867097][ T6754] RSP: 0018:ffffc9000b98f750 EFLAGS: 00010293 [ 197.867126][ T6754] RAX: 0000000000000000 RBX: ffff88806a8a0018 RCX: ffffffff826604eb [ 197.867154][ T6754] RDX: ffff88802a843b80 RSI: ffffffff8266083a RDI: 0000000000000001 [ 197.867179][ T6754] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 197.867201][ T6754] R10: 0000000000000001 R11: 0000000000000000 R12: 000000001b310001 [ 197.867224][ T6754] R13: 0000000000000000 R14: ffff888029c98000 R15: dffffc0000000000 [ 197.867260][ T6754] ? hfsplus_free_extents+0x8b/0x520 [ 197.867296][ T6754] ? hfsplus_free_extents+0x3da/0x520 [ 197.867348][ T6754] hfsplus_file_truncate+0x836/0x9e0 [ 197.867388][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.867442][ T6754] ? __up_read+0x1fc/0x760 [ 197.867490][ T6754] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 197.867537][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.867599][ T6754] ? inode_newsize_ok+0x13c/0x200 [ 197.867645][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.867713][ T6754] hfsplus_setattr+0x1eb/0x310 [ 197.867778][ T6754] ? __pfx_hfsplus_setattr+0x10/0x10 [ 197.867835][ T6754] notify_change+0x745/0x11c0 [ 197.867895][ T6754] do_truncate+0x15c/0x220 [ 197.867934][ T6754] ? __pfx_do_truncate+0x10/0x10 [ 197.867969][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.868023][ T6754] ? common_perm_cond+0x242/0x560 [ 197.868086][ T6754] path_openat+0x24c0/0x29a0 [ 197.868160][ T6754] ? __pfx_path_openat+0x10/0x10 [ 197.868218][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.868273][ T6754] ? __pfx___lock_acquire+0x10/0x10 [ 197.868328][ T6754] ? find_held_lock+0x2d/0x110 [ 197.868379][ T6754] do_filp_open+0x1de/0x440 [ 197.868417][ T6754] ? __pfx_do_filp_open+0x10/0x10 [ 197.868452][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.868506][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.868596][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.868650][ T6754] ? _raw_spin_unlock+0x28/0x50 [ 197.868693][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.868750][ T6754] ? alloc_fd+0x2da/0x6c0 [ 197.868815][ T6754] do_sys_openat2+0x17a/0x1e0 [ 197.868863][ T6754] ? __pfx_do_sys_openat2+0x10/0x10 [ 197.868916][ T6754] ? ptrace_notify+0xf4/0x140 [ 197.868966][ T6754] ? __pfx_lock_release+0x10/0x10 [ 197.869030][ T6754] __x64_sys_open+0x154/0x1e0 [ 197.869079][ T6754] ? __pfx___x64_sys_open+0x10/0x10 [ 197.869132][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.869185][ T6754] ? _raw_spin_unlock_irq+0x2e/0x50 [ 197.869229][ T6754] ? srso_return_thunk+0x5/0x5f [ 197.869283][ T6754] ? ptrace_notify+0xf4/0x140 [ 197.869390][ T6751] hfsplus: request for non-existent node 16777216 in B*Tree [ 198.243836][ T6754] ? srso_return_thunk+0x5/0x5f [ 198.248753][ T6754] do_syscall_64+0xd8/0x270 [ 198.253293][ T6754] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 198.259235][ T6754] RIP: 0033:0x7eff81f10b89 [ 198.263675][ T6754] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 198.283324][ T6754] RSP: 002b:00007eff81eac218 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 198.291770][ T6754] RAX: ffffffffffffffda RBX: 00007eff81f996d8 RCX: 00007eff81f10b89 [ 198.300026][ T6754] RDX: 0000000000000000 RSI: 0000000000004374 RDI: 0000000020000040 [ 198.308021][ T6754] RBP: 00007eff81f996d0 R08: 00007ffca8bee4b7 R09: 0000000000000000 [ 198.316019][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff81f650c0 [ 198.324015][ T6754] R13: 0031656c69662f2e R14: 0073756c70736668 R15: 6465646165726874 [ 198.332034][ T6754] [ 198.335304][ T6754] Kernel Offset: disabled [ 198.339746][ T6754] Rebooting in 86400 seconds..