./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor922316544 <...> hild_tidptr=0x555555fbc690) = 6128 ./strace-static-x86_64: Process 6128 attached [pid 6119] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 6128] set_robust_list(0x555555fbc6a0, 24 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6128] <... set_robust_list resumed>) = 0 [pid 6123] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5070] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6128] chdir("./58" [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6128] <... chdir resumed>) = 0 [pid 5070] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] openat(AT_FDCWD, "./57/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 6128] setpgid(0, 0) = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6127] <... write resumed>) = 524288 [pid 6128] write(3, "1000", 4 [pid 5067] <... close resumed>) = 0 [pid 6128] <... write resumed>) = 4 [pid 6128] close(3) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs" [pid 6127] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6128] <... symlink resumed>) = 0 [pid 6127] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6128] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... openat resumed>) = 4 [pid 6128] <... futex resumed>) = 0 [pid 6127] ioctl(4, LOOP_SET_FD, 3 [pid 6128] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6128] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6128] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6128] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6128] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6129]}, 88) = 6129 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6130 [pid 6128] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... openat resumed>) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6130 attached ./strace-static-x86_64: Process 6129 attached [pid 5069] getdents64(4, [pid 6130] set_robust_list(0x555555fbc6a0, 24 [pid 6129] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6130] <... set_robust_list resumed>) = 0 [pid 6129] <... rseq resumed>) = 0 [pid 6130] chdir("./57" [pid 6129] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6129] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6129] memfd_create("syzkaller", 0) = 3 [pid 6127] <... ioctl resumed>) = 0 [pid 6130] <... chdir resumed>) = 0 [pid 6129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6129] <... mmap resumed>) = 0x7efd74b1c000 [pid 6127] close(3 [pid 6130] <... prctl resumed>) = 0 [pid 5069] getdents64(4, [pid 6130] setpgid(0, 0 [pid 6127] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6130] <... setpgid resumed>) = 0 [pid 6127] mkdir("./bus", 0777 [pid 6119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 127.917756][ T6123] hfsplus: request for non-existent node 16715520 in B*Tree [ 127.930365][ T6127] loop0: detected capacity change from 0 to 1024 [ 127.932456][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 5069] close(4 [pid 6130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6127] <... mkdir resumed>) = 0 [pid 6119] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 6130] <... openat resumed>) = 3 [pid 6130] write(3, "1000", 4) = 4 [pid 6130] close(3) = 0 [pid 6130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6127] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6119] <... futex resumed>) = 0 [pid 5069] rmdir("./57/bus" [pid 6119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6119] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6119] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6119] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6119] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6131]}, 88) = 6131 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6130] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6131 attached [pid 6130] <... futex resumed>) = 0 [pid 6119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6131] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6130] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6119] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6131] <... rseq resumed>) = 0 [pid 6131] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6119] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6131] <... set_robust_list resumed>) = 0 [pid 6119] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6131] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6131] creat("./file1", 000 [pid 6127] <... mount resumed>) = 0 [pid 5069] unlink("./57/binderfs" [pid 6127] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] <... unlink resumed>) = 0 [pid 6130] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6127] chdir("./bus" [pid 6130] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6127] <... chdir resumed>) = 0 [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] ioctl(4, LOOP_CLR_FD [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6127] <... ioctl resumed>) = 0 [pid 6130] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6130] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6127] close(4 [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6127] <... close resumed>) = 0 [pid 6130] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6127] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6127] <... futex resumed>) = 1 [pid 6126] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6132 attached [pid 6129] <... write resumed>) = 524288 [pid 6127] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6130] <... clone3 resumed> => {parent_tid=[6132]}, 88) = 6132 [pid 6129] munmap(0x7efd74b1c000, 138412032 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6132] <... rseq resumed>) = 0 [pid 6130] rt_sigprocmask(SIG_SETMASK, [], [pid 6129] <... munmap resumed>) = 0 [pid 6127] creat("./bus", 000 [pid 6126] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6127] <... creat resumed>) = 4 [pid 5069] getdents64(3, [pid 6132] <... set_robust_list resumed>) = 0 [pid 6127] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], [pid 6130] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = 1 [pid 6126] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6130] <... futex resumed>) = 0 [pid 6129] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6127] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 6132] memfd_create("syzkaller", 0 [pid 6130] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6129] <... openat resumed>) = 4 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6126] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] <... memfd_create resumed>) = 3 [pid 6129] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... close resumed>) = 0 [ 127.963107][ T6123] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] rmdir("./57" [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6132] <... mmap resumed>) = 0x7efd74b1c000 [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6129] <... ioctl resumed>) = 0 [pid 5070] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./58", 0777 [pid 6129] close(3) = 0 [pid 6129] mkdir("./bus", 0777) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... mkdir resumed>) = 0 [pid 6129] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6119] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] newfstatat(AT_FDCWD, "./58/bus", [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 128.004806][ T6129] loop3: detected capacity change from 0 to 1024 [ 128.011794][ T6123] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.029299][ T6123] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6132] <... write resumed>) = 524288 [pid 6131] <... creat resumed>) = 5 [pid 6126] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6131] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(3 [pid 6131] <... futex resumed>) = 0 [pid 6131] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] openat(AT_FDCWD, "./58/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6133 attached [pid 6126] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] <... openat resumed>) = 4 [pid 6133] set_robust_list(0x555555fbc6a0, 24 [pid 6126] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] newfstatat(4, "", [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6133 [pid 6132] munmap(0x7efd74b1c000, 138412032 [pid 6129] <... mount resumed>) = 0 [pid 6126] <... mprotect resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6133] <... set_robust_list resumed>) = 0 [pid 6132] <... munmap resumed>) = 0 [pid 6129] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6133] chdir("./58" [pid 6132] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6129] <... openat resumed>) = 3 [pid 6133] <... chdir resumed>) = 0 [pid 6132] <... openat resumed>) = 4 [pid 6129] chdir("./bus" [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6132] ioctl(4, LOOP_SET_FD, 3 [pid 6129] <... chdir resumed>) = 0 [pid 6133] <... prctl resumed>) = 0 [pid 6129] ioctl(4, LOOP_CLR_FD [pid 6126] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] getdents64(4, [pid 6133] setpgid(0, 0 [pid 6129] <... ioctl resumed>) = 0 [pid 6133] <... setpgid resumed>) = 0 [pid 6129] close(4 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6129] <... close resumed>) = 0 [pid 6133] <... openat resumed>) = 3 [pid 6126] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [ 128.053129][ T6127] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.055963][ T6123] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.087069][ T6132] loop2: detected capacity change from 0 to 1024 [ 128.091719][ T6123] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6129] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6123] <... write resumed>) = 57344 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6123] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] write(3, "1000", 4 [pid 6129] <... futex resumed>) = 1 [pid 6123] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6134 attached [pid 6123] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] close(4 [pid 6134] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5070] <... close resumed>) = 0 [pid 6134] <... rseq resumed>) = 0 [pid 6134] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6133] <... write resumed>) = 4 [pid 6129] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] rmdir("./58/bus" [pid 6134] <... set_robust_list resumed>) = 0 [pid 6134] rt_sigprocmask(SIG_SETMASK, [], [pid 6133] close(3 [pid 6119] exit_group(0 [pid 5070] <... rmdir resumed>) = 0 [pid 6134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6134] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6133] <... close resumed>) = 0 [pid 6132] <... ioctl resumed>) = 0 [pid 6131] <... futex resumed>) = ? [pid 6128] <... futex resumed>) = 0 [pid 6126] <... clone3 resumed> => {parent_tid=[6134]}, 88) = 6134 [pid 6123] <... futex resumed>) = ? [pid 6119] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6133] symlink("/dev/binderfs", "./binderfs" [pid 6132] close(3 [pid 6131] +++ exited with 0 +++ [pid 6128] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] rt_sigprocmask(SIG_SETMASK, [], [pid 6123] +++ exited with 0 +++ [pid 6119] +++ exited with 0 +++ [pid 6133] <... symlink resumed>) = 0 [pid 6129] <... futex resumed>) = 0 [pid 6128] <... futex resumed>) = 1 [pid 6133] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6129] creat("./bus", 000 [ 128.096142][ T6127] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6128] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6133] <... futex resumed>) = 0 [pid 6132] <... close resumed>) = 0 [pid 6129] <... creat resumed>) = 4 [pid 6126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6133] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6132] mkdir("./bus", 0777 [pid 6129] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6129] <... futex resumed>) = 1 [pid 6128] <... futex resumed>) = 0 [pid 6126] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6119, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6133] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6132] <... mkdir resumed>) = 0 [pid 6129] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6128] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6129] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6128] <... futex resumed>) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6129] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6128] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6133] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6133] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6135 attached [pid 6135] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6133] <... clone3 resumed> => {parent_tid=[6135]}, 88) = 6135 [pid 6135] <... rseq resumed>) = 0 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], [pid 6135] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6135] <... set_robust_list resumed>) = 0 [pid 6133] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] rt_sigprocmask(SIG_SETMASK, [], [pid 6133] <... futex resumed>) = 0 [pid 6135] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6133] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6135] memfd_create("syzkaller", 0 [pid 6134] <... futex resumed>) = 0 [pid 6132] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6126] <... futex resumed>) = 1 [pid 5070] unlink("./58/binderfs" [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6135] <... memfd_create resumed>) = 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 6135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6134] creat("./file1", 000 [pid 5070] <... unlink resumed>) = 0 [pid 6126] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(3, [pid 5066] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] rmdir("./58" [pid 5066] newfstatat(3, "", [pid 5070] <... rmdir resumed>) = 0 [pid 5070] mkdir("./59", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6135] <... write resumed>) = 524288 [pid 5070] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [ 128.128591][ T6127] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.141387][ T6127] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6134] <... creat resumed>) = 5 [pid 6135] munmap(0x7efd74b1c000, 138412032 [pid 6132] <... mount resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6134] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6135] <... munmap resumed>) = 0 [pid 6134] <... futex resumed>) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6132] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... openat resumed>) = 3 [pid 6128] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6134] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6128] <... mmap resumed>) = 0x7efd7cefb000 [pid 6128] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6128] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6135] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6128] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6128] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6136]}, 88) = 6136 [pid 6128] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6128] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6128] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6136 attached [pid 6135] <... openat resumed>) = 4 [pid 6136] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6135] ioctl(4, LOOP_SET_FD, 3 [pid 6136] <... rseq resumed>) = 0 [pid 6132] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6136] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6132] chdir("./bus" [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6136] <... set_robust_list resumed>) = 0 [pid 6132] <... chdir resumed>) = 0 [pid 5070] close(3 [pid 6136] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... close resumed>) = 0 [pid 6132] ioctl(4, LOOP_CLR_FD [pid 6136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6136] creat("./file1", 000 [pid 6132] <... ioctl resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = 0 [pid 6132] close(4./strace-static-x86_64: Process 6137 attached ) = 0 [pid 5066] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6137 [pid 6137] set_robust_list(0x555555fbc6a0, 24 [pid 6132] <... futex resumed>) = 1 [pid 6132] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... set_robust_list resumed>) = 0 [ 128.177370][ T6129] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.185469][ T6129] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.191570][ T6127] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.194738][ T6129] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.208403][ T6135] loop4: detected capacity change from 0 to 1024 [ 128.209408][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6137] chdir("./59" [pid 6135] <... ioctl resumed>) = 0 [pid 6130] <... futex resumed>) = 0 [pid 6128] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] newfstatat(AT_FDCWD, "./58/bus", [pid 6130] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6132] <... futex resumed>) = 0 [pid 6135] close(3 [pid 6130] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] creat("./bus", 000 [pid 6135] <... close resumed>) = 0 [pid 6135] mkdir("./bus", 0777 [pid 6137] <... chdir resumed>) = 0 [pid 6135] <... mkdir resumed>) = 0 [pid 6132] <... creat resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6135] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6132] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... prctl resumed>) = 0 [pid 6132] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 5066] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6130] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "./58/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6130] <... futex resumed>) = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6130] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... openat resumed>) = 4 [pid 6137] <... openat resumed>) = 3 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 6127] <... write resumed>) = 57344 [pid 5066] rmdir("./58/bus" [pid 6127] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] exit_group(0 [pid 6134] <... futex resumed>) = ? [pid 6126] <... exit_group resumed>) = ? [pid 6134] +++ exited with 0 +++ [pid 6127] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 6135] <... mount resumed>) = 0 [pid 6135] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6135] chdir("./bus" [pid 5066] <... rmdir resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6137] write(3, "1000", 4 [pid 6135] <... chdir resumed>) = 0 [pid 5066] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6135] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6137] <... write resumed>) = 4 [pid 6135] <... ioctl resumed>) = 0 [pid 6135] close(4) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6137] close(3 [pid 6135] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] unlink("./58/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] <... close resumed>) = 0 [pid 6135] <... futex resumed>) = 1 [ 128.252436][ T6127] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.254142][ T6129] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.282856][ T6132] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.293198][ T6132] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6133] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6137] symlink("/dev/binderfs", "./binderfs" [pid 6136] <... creat resumed>) = 5 [pid 6135] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... unlink resumed>) = 0 [pid 6136] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6133] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6133] <... futex resumed>) = 0 [pid 6136] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] creat("./bus", 000) = 4 [pid 6137] <... symlink resumed>) = 0 [pid 6130] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 6135] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6133] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6135] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6137] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(3, "", [pid 6137] <... futex resumed>) = 0 [pid 6130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6130] <... mmap resumed>) = 0x7efd7cefb000 [pid 6137] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6130] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... close resumed>) = 0 [ 128.323597][ T6132] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.332132][ T6129] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.341530][ T6129] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.351034][ T6132] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.352563][ T6135] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] getdents64(3, [pid 6137] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6130] <... mprotect resumed>) = 0 [pid 6129] <... write resumed>) = 57344 [pid 5066] rmdir("./58" [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6137] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6130] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6129] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6129] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6133] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6130] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] mkdir("./59", 0777 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6133] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6128] exit_group(0 [pid 6136] <... futex resumed>) = ? [pid 6133] <... futex resumed>) = 0 [pid 6129] <... futex resumed>) = ? [pid 6128] <... exit_group resumed>) = ? [pid 6137] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6136] +++ exited with 0 +++ [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6129] +++ exited with 0 +++ [pid 6137] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6133] <... mmap resumed>) = 0x7efd7cefb000 [pid 6128] +++ exited with 0 +++ [pid 5066] <... mkdir resumed>) = 0 [pid 6133] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6128, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6133] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 6133] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... restart_syscall resumed>) = 0 [pid 6133] <... clone3 resumed> => {parent_tid=[6139]}, 88) = 6139 [pid 6133] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6139 attached ./strace-static-x86_64: Process 6138 attached [pid 6137] <... mprotect resumed>) = 0 [pid 6133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6130] <... clone3 resumed> => {parent_tid=[6138]}, 88) = 6138 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6139] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6133] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] <... rseq resumed>) = 0 [pid 6133] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6139] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6138] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6133] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] newfstatat(3, "", [pid 6139] <... set_robust_list resumed>) = 0 [pid 6138] <... rseq resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6139] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6138] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6137] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] getdents64(3, [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6139] creat("./file1", 000 [pid 6138] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6139] <... creat resumed>) = 5 [pid 6138] rt_sigprocmask(SIG_SETMASK, [], [pid 6137] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6130] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6137] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6139] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6130] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 6139] <... futex resumed>) = 1 [pid 6138] creat("./file1", 000 [pid 6137] <... clone3 resumed> => {parent_tid=[6140]}, 88) = 6140 [pid 6133] <... futex resumed>) = 0 [ 128.369278][ T6132] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.376191][ T6135] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.387479][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 128.398312][ T6132] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6130] <... futex resumed>) = 0 [pid 6139] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] rt_sigprocmask(SIG_SETMASK, [], [pid 6130] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... close resumed>) = 0 [pid 6137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6140 attached [pid 6137] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6138] <... creat resumed>) = 5 [pid 6137] <... futex resumed>) = 0 [pid 6140] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6138] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6140] <... set_robust_list resumed>) = 0 [pid 6138] <... futex resumed>) = 1 [pid 6130] <... futex resumed>) = 0 [pid 6140] rt_sigprocmask(SIG_SETMASK, [], [pid 6138] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6141 [pid 6140] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6141 attached [pid 6140] memfd_create("syzkaller", 0 [pid 6132] <... write resumed>) = 57344 [pid 6141] set_robust_list(0x555555fbc6a0, 24 [pid 6140] <... memfd_create resumed>) = 3 [ 128.418154][ T6135] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6141] <... set_robust_list resumed>) = 0 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6132] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = 0 [pid 6132] <... futex resumed>) = 0 [pid 5065] umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] chdir("./59" [pid 6140] <... mmap resumed>) = 0x7efd74b1c000 [pid 6130] exit_group(0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./57/bus", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] <... chdir resumed>) = 0 [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6138] <... futex resumed>) = ? [pid 6132] <... futex resumed>) = ? [pid 6130] <... exit_group resumed>) = ? [pid 5068] newfstatat(AT_FDCWD, "./58/bus", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6132] +++ exited with 0 +++ [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6138] +++ exited with 0 +++ [pid 6130] +++ exited with 0 +++ [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./57/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./58/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6141] <... prctl resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 6141] setpgid(0, 0 [pid 5068] newfstatat(4, "", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6130, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] newfstatat(4, "", [pid 6141] <... setpgid resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6140] <... write resumed>) = 524288 [pid 5067] <... restart_syscall resumed>) = 0 [pid 6141] <... openat resumed>) = 3 [pid 6141] write(3, "1000", 4) = 4 [pid 5067] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6141] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, [pid 5065] getdents64(4, [pid 6141] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6141] <... symlink resumed>) = 0 [pid 5068] getdents64(4, [pid 5067] newfstatat(3, "", [pid 6141] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 6141] <... futex resumed>) = 0 [pid 5068] close(4 [ 128.446329][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 128.452692][ T6135] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] getdents64(3, [pid 6141] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] rmdir("./58/bus" [pid 5065] close(4 [pid 6141] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5068] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./57/bus" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6141] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6140] munmap(0x7efd74b1c000, 138412032 [pid 6141] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6140] <... munmap resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./58/binderfs", [pid 5065] <... rmdir resumed>) = 0 [pid 6141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6141] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6140] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] unlink("./58/binderfs" [pid 6141] <... mprotect resumed>) = 0 [pid 6140] <... openat resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 6141] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 5068] getdents64(3, [pid 6141] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6141] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6142]}, 88) = 6142 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6141] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6142 attached [pid 6140] <... ioctl resumed>) = 0 [pid 6142] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6140] close(3 [pid 6142] <... rseq resumed>) = 0 [pid 6140] <... close resumed>) = 0 [pid 6142] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6140] mkdir("./bus", 0777 [pid 6142] <... set_robust_list resumed>) = 0 [pid 6140] <... mkdir resumed>) = 0 [pid 6142] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6142] memfd_create("syzkaller", 0 [pid 6140] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6142] <... memfd_create resumed>) = 3 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./57/binderfs", [pid 5068] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6135] <... write resumed>) = 57344 [pid 5068] <... close resumed>) = 0 [pid 5065] unlink("./57/binderfs" [pid 5068] rmdir("./58" [pid 6142] <... write resumed>) = 524288 [pid 6135] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6135] <... futex resumed>) = 0 [pid 5068] mkdir("./59", 0777 [pid 5065] getdents64(3, [pid 6135] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [ 128.507130][ T6135] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.529990][ T6140] loop5: detected capacity change from 0 to 1024 [ 128.530211][ T6135] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.544814][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 5065] close(3 [pid 6140] <... mount resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] rmdir("./57" [pid 6140] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6133] exit_group(0 [pid 6140] <... openat resumed>) = 3 [pid 6139] <... futex resumed>) = ? [pid 6133] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 6135] <... futex resumed>) = ? [pid 5065] mkdir("./58", 0777 [pid 6135] +++ exited with 0 +++ [pid 6142] munmap(0x7efd74b1c000, 138412032 [pid 6140] chdir("./bus" [pid 6139] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6140] <... chdir resumed>) = 0 [pid 5068] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5069] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6140] ioctl(4, LOOP_CLR_FD) = 0 [pid 6140] close(4 [pid 6142] <... munmap resumed>) = 0 [pid 6140] <... close resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6143 [pid 5065] close(3 [pid 6142] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6140] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6143 attached [pid 6140] <... futex resumed>) = 1 [pid 6140] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] set_robust_list(0x555555fbc6a0, 24 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... set_robust_list resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6137] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6144 attached ) = 1 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6144 [pid 6144] set_robust_list(0x555555fbc6a0, 24 [pid 6143] chdir("./59" [pid 6140] <... futex resumed>) = 0 [pid 6137] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] newfstatat(AT_FDCWD, "./57/bus", [pid 6144] <... set_robust_list resumed>) = 0 [pid 6142] <... openat resumed>) = 4 [pid 5069] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... chdir resumed>) = 0 [pid 6140] creat("./bus", 000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6144] chdir("./58" [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6142] ioctl(4, LOOP_SET_FD, 3 [pid 6140] <... creat resumed>) = 4 [pid 5067] umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6143] <... prctl resumed>) = 0 [pid 6140] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6143] setpgid(0, 0 [pid 6140] <... futex resumed>) = 1 [pid 5067] openat(AT_FDCWD, "./57/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6143] <... setpgid resumed>) = 0 [pid 6140] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... openat resumed>) = 4 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] newfstatat(4, "", [pid 6143] write(3, "1000", 4 [pid 6137] <... futex resumed>) = 0 [pid 6143] <... write resumed>) = 4 [pid 6137] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6143] close(3 [pid 6140] <... futex resumed>) = 0 [pid 6137] <... futex resumed>) = 1 [pid 5067] getdents64(4, [pid 6143] <... close resumed>) = 0 [pid 6140] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6143] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6144] <... chdir resumed>) = 0 [pid 6143] <... symlink resumed>) = 0 [pid 6142] <... ioctl resumed>) = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6144] setpgid(0, 0 [pid 6143] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] getdents64(4, [pid 6144] <... setpgid resumed>) = 0 [pid 6142] close(3 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6142] <... close resumed>) = 0 [pid 5067] rmdir("./57/bus" [pid 6142] mkdir("./bus", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 6144] <... openat resumed>) = 3 [pid 5067] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6143] <... futex resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./57/binderfs", [pid 6144] write(3, "1000", 4 [pid 6143] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6142] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6144] <... write resumed>) = 4 [pid 6144] close(3 [pid 6143] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6142] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] unlink("./57/binderfs" [pid 6144] <... close resumed>) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] <... unlink resumed>) = 0 [pid 6144] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] getdents64(3, [pid 6144] <... futex resumed>) = 0 [pid 6144] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6143] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5067] close(3 [pid 6143] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... close resumed>) = 0 [pid 6143] <... mprotect resumed>) = 0 [pid 5067] rmdir("./57" [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [ 128.637037][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 128.644046][ T6142] loop1: detected capacity change from 0 to 1024 [ 128.647790][ T6140] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] mkdir("./58", 0777./strace-static-x86_64: Process 6145 attached [pid 6144] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6142] <... mount resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6145] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6143] <... clone3 resumed> => {parent_tid=[6145]}, 88) = 6145 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6145] <... rseq resumed>) = 0 [pid 6143] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... openat resumed>) = 3 [pid 6145] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6143] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6143] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6145] <... set_robust_list resumed>) = 0 [pid 6143] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... close resumed>) = 0 [pid 6145] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6142] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6144] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6145] memfd_create("syzkaller", 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6146 [pid 6144] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6146 attached [pid 6145] <... memfd_create resumed>) = 3 [pid 6144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6142] <... openat resumed>) = 3 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6146] set_robust_list(0x555555fbc6a0, 24 [pid 6145] <... mmap resumed>) = 0x7efd74b1c000 [pid 6144] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6142] chdir("./bus" [pid 6146] <... set_robust_list resumed>) = 0 [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6144] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6142] <... chdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 6146] chdir("./58" [pid 6144] <... mprotect resumed>) = 0 [pid 6142] ioctl(4, LOOP_CLR_FD [pid 6137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6146] <... chdir resumed>) = 0 [pid 6144] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6142] <... ioctl resumed>) = 0 [pid 6137] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6144] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6142] close(4 [pid 6146] <... prctl resumed>) = 0 [pid 6144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6142] <... close resumed>) = 0 [pid 5069] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6147 attached [pid 6146] setpgid(0, 0 [pid 6142] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 128.679499][ T6140] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.687640][ T6140] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.697854][ T6140] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.710162][ T6140] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6147] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6146] <... setpgid resumed>) = 0 [pid 6145] <... write resumed>) = 524288 [pid 6144] <... clone3 resumed> => {parent_tid=[6147]}, 88) = 6147 [pid 6142] <... futex resumed>) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] newfstatat(AT_FDCWD, "./58/bus", [pid 6147] <... rseq resumed>) = 0 [pid 6146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6144] rt_sigprocmask(SIG_SETMASK, [], [pid 6142] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... mmap resumed>) = 0x7efd7cefb000 [pid 6147] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6146] <... openat resumed>) = 3 [pid 6144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6140] <... write resumed>) = 57344 [pid 6137] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6147] <... set_robust_list resumed>) = 0 [pid 6146] write(3, "1000", 4 [pid 6144] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] creat("./bus", 000 [pid 6141] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... mprotect resumed>) = 0 [pid 6147] rt_sigprocmask(SIG_SETMASK, [], [pid 6146] <... write resumed>) = 4 [pid 6144] <... futex resumed>) = 0 [pid 6142] <... creat resumed>) = 4 [pid 6140] <... futex resumed>) = 0 [pid 6137] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6146] close(3 [pid 6145] munmap(0x7efd74b1c000, 138412032 [pid 6144] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6142] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] <... close resumed>) = 0 [pid 6145] <... munmap resumed>) = 0 [pid 6142] <... futex resumed>) = 1 [pid 6141] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./58/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] symlink("/dev/binderfs", "./binderfs" [pid 6142] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 6146] <... symlink resumed>) = 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 5069] newfstatat(4, "", [ 128.723512][ T6140] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6146] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6142] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6141] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6147] memfd_create("syzkaller", 0 [pid 6146] <... futex resumed>) = 0 [pid 6140] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6147] <... memfd_create resumed>) = 3 [pid 6146] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6137] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6146] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6146] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6145] <... openat resumed>) = 4 [pid 5069] getdents64(4, [pid 6146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6145] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6148 attached [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] getdents64(4, [pid 6148] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6147] <... mmap resumed>) = 0x7efd74b1c000 [pid 6146] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6137] <... clone3 resumed> => {parent_tid=[6148]}, 88) = 6148 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6148] <... rseq resumed>) = 0 [pid 6146] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6137] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(4 [pid 6148] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6146] <... mprotect resumed>) = 0 [pid 6137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... close resumed>) = 0 [pid 6148] <... set_robust_list resumed>) = 0 [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6137] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./58/bus" [pid 6148] rt_sigprocmask(SIG_SETMASK, [], [pid 6146] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6145] <... ioctl resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6145] close(3 [pid 5069] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6148] creat("./file1", 000 [pid 6145] <... close resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6149 attached [pid 6148] <... creat resumed>) = 5 [pid 6146] <... clone3 resumed> => {parent_tid=[6149]}, 88) = 6149 [pid 6145] mkdir("./bus", 0777 [pid 6137] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6149] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], [pid 6145] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6149] <... rseq resumed>) = 0 [pid 6148] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 128.765353][ T6142] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.777409][ T6145] loop3: detected capacity change from 0 to 1024 [pid 6145] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] unlink("./58/binderfs" [pid 6149] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... write resumed>) = 524288 [pid 6146] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6149] <... set_robust_list resumed>) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6137] exit_group(0 [pid 5069] getdents64(3, [pid 6149] rt_sigprocmask(SIG_SETMASK, [], [pid 6148] ???( [pid 6147] munmap(0x7efd74b1c000, 138412032 [pid 6146] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6137] <... exit_group resumed>) = ? [pid 6149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6148] <... ??? resumed>) = ? [pid 6140] <... futex resumed>) = ? [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6149] memfd_create("syzkaller", 0 [pid 6148] +++ exited with 0 +++ [pid 6140] +++ exited with 0 +++ [pid 5069] close(3 [pid 6147] <... munmap resumed>) = 0 [pid 6141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... close resumed>) = 0 [pid 6141] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./58" [pid 6141] <... futex resumed>) = 0 [pid 6141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6149] <... memfd_create resumed>) = 3 [pid 6141] <... mmap resumed>) = 0x7efd7cefb000 [pid 6145] <... mount resumed>) = 0 [pid 6141] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6145] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6141] <... mprotect resumed>) = 0 [pid 6145] <... openat resumed>) = 3 [pid 6141] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6145] chdir("./bus" [pid 6141] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6145] <... chdir resumed>) = 0 [pid 6141] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6145] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 6150 attached [pid 6145] close(4 [pid 6141] <... clone3 resumed> => {parent_tid=[6150]}, 88) = 6150 [pid 5069] mkdir("./59", 0777 [pid 6150] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6145] <... close resumed>) = 0 [pid 6141] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... mkdir resumed>) = 0 [pid 6150] <... rseq resumed>) = 0 [pid 6145] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6137] +++ exited with 0 +++ [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6149] <... mmap resumed>) = 0x7efd74b1c000 [pid 6150] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6147] <... openat resumed>) = 4 [pid 6145] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6141] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5069] <... openat resumed>) = 3 [pid 6150] <... set_robust_list resumed>) = 0 [pid 6145] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] <... futex resumed>) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6150] rt_sigprocmask(SIG_SETMASK, [], [pid 6141] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 6143] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 6150] creat("./file1", 000 [pid 6145] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = 1 [pid 5069] <... close resumed>) = 0 [pid 6145] creat("./bus", 000 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6145] <... creat resumed>) = 4 [pid 6145] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6145] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6151 [pid 6145] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6143] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6143] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6151 attached [pid 6143] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] newfstatat(3, "", [pid 6151] set_robust_list(0x555555fbc6a0, 24 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6151] <... set_robust_list resumed>) = 0 [pid 5070] getdents64(3, [ 128.812654][ T6142] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.845487][ T6142] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.854853][ T6147] loop0: detected capacity change from 0 to 1024 [pid 6151] chdir("./59" [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6151] <... chdir resumed>) = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6151] <... prctl resumed>) = 0 [pid 6151] setpgid(0, 0 [pid 6147] <... ioctl resumed>) = 0 [pid 6151] <... setpgid resumed>) = 0 [pid 6147] close(3 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6151] write(3, "1000", 4 [pid 6141] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6147] <... close resumed>) = 0 [pid 6151] <... write resumed>) = 4 [pid 6147] mkdir("./bus", 0777 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6151] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] <... mkdir resumed>) = 0 [pid 6151] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6149] <... write resumed>) = 524288 [pid 6147] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6143] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6143] <... futex resumed>) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6151] <... mprotect resumed>) = 0 [pid 6143] <... mmap resumed>) = 0x7efd7cefb000 [pid 6143] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6151] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6143] <... mprotect resumed>) = 0 [pid 6151] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6149] munmap(0x7efd74b1c000, 138412032 [pid 6143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6149] <... munmap resumed>) = 0 [ 128.877755][ T6145] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.889880][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 128.900496][ T6142] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6153 attached ./strace-static-x86_64: Process 6152 attached [pid 6151] <... clone3 resumed> => {parent_tid=[6152]}, 88) = 6152 [pid 6149] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6147] <... mount resumed>) = 0 [pid 6153] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6152] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6151] rt_sigprocmask(SIG_SETMASK, [], [pid 6149] <... openat resumed>) = 4 [pid 6143] <... clone3 resumed> => {parent_tid=[6153]}, 88) = 6153 [pid 6153] <... rseq resumed>) = 0 [pid 6152] <... rseq resumed>) = 0 [pid 6151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6147] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6143] rt_sigprocmask(SIG_SETMASK, [], [pid 6153] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6152] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6151] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... creat resumed>) = 5 [pid 6149] ioctl(4, LOOP_SET_FD, 3 [pid 6153] <... set_robust_list resumed>) = 0 [pid 6152] <... set_robust_list resumed>) = 0 [pid 6151] <... futex resumed>) = 0 [pid 6150] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6147] <... openat resumed>) = 3 [pid 6143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6151] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6150] <... futex resumed>) = 0 [pid 6150] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] rt_sigprocmask(SIG_SETMASK, [], [pid 6149] <... ioctl resumed>) = 0 [pid 6147] chdir("./bus" [pid 6143] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6149] close(3 [pid 6147] <... chdir resumed>) = 0 [pid 6143] <... futex resumed>) = 0 [pid 6153] creat("./file1", 000 [ 128.929256][ T6145] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.948338][ T6149] loop2: detected capacity change from 0 to 1024 [ 128.955981][ T6145] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.956037][ T6142] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.963424][ T6145] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6152] memfd_create("syzkaller", 0 [pid 6153] <... creat resumed>) = 5 [pid 6152] <... memfd_create resumed>) = 3 [pid 6149] <... close resumed>) = 0 [pid 6143] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] ioctl(4, LOOP_CLR_FD [pid 6153] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6149] mkdir("./bus", 0777 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] <... futex resumed>) = 0 [pid 6147] <... ioctl resumed>) = 0 [pid 6153] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6152] <... mmap resumed>) = 0x7efd74b1c000 [pid 6149] <... mkdir resumed>) = 0 [pid 6147] close(4) = 0 [pid 6147] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 6149] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6147] <... futex resumed>) = 1 [pid 6144] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./59/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./59/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, [pid 6147] creat("./bus", 000 [pid 6144] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6144] <... futex resumed>) = 0 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6147] <... creat resumed>) = 4 [pid 6144] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(4) = 0 [pid 5070] rmdir("./59/bus") = 0 [pid 5070] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./59/binderfs" [pid 6152] <... write resumed>) = 524288 [pid 6142] <... write resumed>) = 57344 [pid 5070] <... unlink resumed>) = 0 [pid 6142] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6147] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 6147] <... futex resumed>) = 1 [pid 6144] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6147] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6144] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] exit_group(0 [pid 5070] close(3 [pid 6150] <... futex resumed>) = ? [pid 6144] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = ? [pid 6141] <... exit_group resumed>) = ? [pid 5070] <... close resumed>) = 0 [pid 6150] +++ exited with 0 +++ [pid 6144] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] +++ exited with 0 +++ [pid 6141] +++ exited with 0 +++ [pid 5070] rmdir("./59" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6149] <... mount resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5070] mkdir("./60", 0777 [pid 5066] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [ 128.971765][ T6142] hfsplus: request for non-existent node 16715520 in B*Tree [ 128.992135][ T6145] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.009825][ T6145] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6152] munmap(0x7efd74b1c000, 138412032 [pid 6149] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6145] <... write resumed>) = 57344 [pid 6149] <... openat resumed>) = 3 [pid 6145] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] chdir("./bus" [pid 6145] <... futex resumed>) = 0 [pid 6145] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] <... chdir resumed>) = 0 [pid 6149] ioctl(4, LOOP_CLR_FD) = 0 [pid 6149] close(4) = 0 [pid 6143] exit_group(0 [pid 6149] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... exit_group resumed>) = ? [pid 6153] <... futex resumed>) = ? [pid 6149] <... futex resumed>) = 1 [pid 6145] <... futex resumed>) = ? [pid 6146] <... futex resumed>) = 0 [pid 6149] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] +++ exited with 0 +++ [pid 6146] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6146] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(3 [pid 6153] +++ exited with 0 +++ [pid 6143] +++ exited with 0 +++ [pid 6149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6149] creat("./bus", 000) = 4 [pid 5070] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6149] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... munmap resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6152] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6149] <... futex resumed>) = 1 [pid 6146] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6154 attached [pid 6152] ioctl(4, LOOP_SET_FD, 3 [pid 6149] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6154 [pid 6154] set_robust_list(0x555555fbc6a0, 24 [pid 6146] <... futex resumed>) = 0 [pid 6144] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... openat resumed>) = 3 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6154] chdir("./60" [pid 6149] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6144] <... futex resumed>) = 0 [pid 5068] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 6154] <... chdir resumed>) = 0 [pid 6144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6144] <... mmap resumed>) = 0x7efd7cefb000 [ 129.049792][ T6147] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.061451][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 129.061707][ T6147] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.087694][ T6152] loop4: detected capacity change from 0 to 1024 [pid 6152] <... ioctl resumed>) = 0 [pid 6152] close(3) = 0 [pid 6152] mkdir("./bus", 0777) = 0 [pid 6152] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6154] <... prctl resumed>) = 0 [pid 6144] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6154] setpgid(0, 0 [pid 6144] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6154] <... setpgid resumed>) = 0 [pid 6144] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6144] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6152] <... mount resumed>) = 0 [pid 6152] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6152] chdir("./bus") = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6155 attached [pid 6144] <... clone3 resumed> => {parent_tid=[6155]}, 88) = 6155 [pid 6155] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6154] <... openat resumed>) = 3 [pid 6144] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] newfstatat(AT_FDCWD, "./59/bus", [pid 6154] write(3, "1000", 4 [pid 6144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6155] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6154] <... write resumed>) = 4 [pid 6144] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6154] close(3 [pid 6144] <... futex resumed>) = 0 [pid 6144] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6154] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./59/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6154] symlink("/dev/binderfs", "./binderfs" [pid 6155] <... set_robust_list resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6155] rt_sigprocmask(SIG_SETMASK, [], [pid 6154] <... symlink resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 6155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6154] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] creat("./file1", 000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6155] <... creat resumed>) = 5 [pid 6146] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6152] ioctl(4, LOOP_CLR_FD) = 0 [pid 6146] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] <... futex resumed>) = 0 [pid 6152] close(4 [pid 6146] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] getdents64(4, [pid 6152] <... close resumed>) = 0 [pid 6146] <... mmap resumed>) = 0x7efd7cefb000 [ 129.107828][ T6147] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.118298][ T6149] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.129196][ T58] hfsplus: b-tree write err: -5, ino 4 [ 129.142226][ T6147] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6154] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6152] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6154] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6152] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6151] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... mprotect resumed>) = 0 [pid 5066] getdents64(4, [pid 6154] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6151] <... futex resumed>) = 0 [pid 6154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] creat("./bus", 000 [pid 6151] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6152] <... creat resumed>) = 4 [pid 6146] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] close(4 [pid 6146] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 6154] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] rmdir("./59/bus" [pid 6155] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = 1 [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6155] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6152] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6151] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6151] <... futex resumed>) = 0 [pid 6146] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6144] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [ 129.155114][ T6149] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6151] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... mprotect resumed>) = 0 [pid 5066] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6156 attached [pid 6154] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6146] <... clone3 resumed> => {parent_tid=[6156]}, 88) = 6156 [pid 5066] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6154] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6146] rt_sigprocmask(SIG_SETMASK, [], [pid 6156] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6146] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6146] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6157 attached [pid 6156] <... rseq resumed>) = 0 [pid 6146] <... futex resumed>) = 0 [pid 6156] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6156] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6156] creat("./file1", 000 [pid 6151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6151] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6146] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6157] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6154] <... clone3 resumed> => {parent_tid=[6157]}, 88) = 6157 [pid 6157] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5066] unlink("./59/binderfs" [pid 6151] <... mmap resumed>) = 0x7efd7cefb000 [pid 6157] <... set_robust_list resumed>) = 0 [pid 6154] rt_sigprocmask(SIG_SETMASK, [], [pid 6151] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6157] rt_sigprocmask(SIG_SETMASK, [], [pid 6151] <... mprotect resumed>) = 0 [pid 6154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 6157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6154] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [ 129.185700][ T6149] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.189026][ T6147] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.205434][ T6152] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.222128][ T6147] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6151] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] memfd_create("syzkaller", 0 [pid 6154] <... futex resumed>) = 0 [pid 6151] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(AT_FDCWD, "./59/bus", [pid 6154] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] close(3 [pid 6157] <... memfd_create resumed>) = 3 [pid 6151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 6157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./59" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] <... mmap resumed>) = 0x7efd74b1c000 [pid 5068] openat(AT_FDCWD, "./59/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 6151] <... clone3 resumed> => {parent_tid=[6158]}, 88) = 6158 [pid 5068] <... openat resumed>) = 4 [pid 5066] mkdir("./60", 0777 [pid 6151] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] newfstatat(4, "", [pid 5066] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6158 attached [pid 6151] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 3 [pid 6158] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6151] <... futex resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6158] <... rseq resumed>) = 0 [pid 6151] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6158] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 5068] getdents64(4, [pid 5066] close(3 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 6158] creat("./file1", 000 [pid 6147] <... write resumed>) = 57344 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6147] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6158] <... creat resumed>) = 5 [pid 6158] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6159 [pid 6158] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6158] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6144] exit_group(0./strace-static-x86_64: Process 6159 attached [pid 6155] <... futex resumed>) = ? [pid 6147] <... futex resumed>) = ? [pid 6144] <... exit_group resumed>) = ? [pid 5068] getdents64(4, [pid 6159] set_robust_list(0x555555fbc6a0, 24 [pid 6155] +++ exited with 0 +++ [pid 6147] +++ exited with 0 +++ [pid 6159] <... set_robust_list resumed>) = 0 [ 129.222380][ T6149] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.244064][ T6152] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6144] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6159] chdir("./60") = 0 [pid 6146] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] close(4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5068] <... close resumed>) = 0 [pid 5065] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] rmdir("./59/bus" [pid 5065] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 6156] <... creat resumed>) = 5 [pid 6156] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6159] <... prctl resumed>) = 0 [pid 6156] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] setpgid(0, 0) = 0 [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] <... openat resumed>) = 3 [ 129.278549][ T6152] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.307312][ T6152] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6159] write(3, "1000", 4) = 4 [pid 6157] <... write resumed>) = 524288 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] close(3 [pid 5068] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6159] <... close resumed>) = 0 [pid 6159] symlink("/dev/binderfs", "./binderfs" [pid 6157] munmap(0x7efd74b1c000, 138412032 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6159] <... symlink resumed>) = 0 [pid 5068] unlink("./59/binderfs" [pid 6157] <... munmap resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6159] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] getdents64(3, [pid 6157] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6159] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 6159] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6159] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5068] <... close resumed>) = 0 [pid 6157] <... openat resumed>) = 4 [pid 5068] rmdir("./59" [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./60", 0777 [pid 6159] <... mmap resumed>) = 0x7efd7cf1c000 [ 129.327652][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 129.327806][ T6149] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.345163][ T6152] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.362024][ T6149] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6159] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6157] ioctl(4, LOOP_SET_FD, 3 [pid 6149] <... write resumed>) = 57344 [pid 5068] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] <... mprotect resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./58/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6159] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6149] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(3 [pid 5065] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6149] <... futex resumed>) = 0 [pid 6146] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 6156] <... futex resumed>) = ? [pid 6146] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] <... clone3 resumed> => {parent_tid=[6160]}, 88) = 6160 [pid 6156] +++ exited with 0 +++ [pid 6152] <... write resumed>) = 57344 [pid 6149] +++ exited with 0 +++ [pid 6159] rt_sigprocmask(SIG_SETMASK, [], [pid 6152] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./58/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6160 attached [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6152] <... futex resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6160] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6159] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] <... ioctl resumed>) = 0 [pid 6152] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6151] exit_group(0 [pid 5065] <... openat resumed>) = 4 [pid 6160] <... rseq resumed>) = 0 [pid 6159] <... futex resumed>) = 0 [pid 6158] <... futex resumed>) = ? [pid 6157] close(3 [pid 6152] <... futex resumed>) = ? [pid 6151] <... exit_group resumed>) = ? [pid 5065] newfstatat(4, "", [pid 6160] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6159] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6158] +++ exited with 0 +++ [pid 6157] <... close resumed>) = 0 [pid 6152] +++ exited with 0 +++ [pid 6151] +++ exited with 0 +++ [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6161 attached [pid 6160] <... set_robust_list resumed>) = 0 [pid 6157] mkdir("./bus", 0777 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6146, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6160] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] getdents64(4, [pid 6160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6160] memfd_create("syzkaller", 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6161] set_robust_list(0x555555fbc6a0, 24 [pid 6157] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 6161] <... set_robust_list resumed>) = 0 [pid 6157] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6161] chdir("./60" [pid 6160] <... memfd_create resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6161 [pid 6161] <... chdir resumed>) = 0 [ 129.374698][ T6152] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.394021][ T6157] loop5: detected capacity change from 0 to 1024 [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] close(4 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6157] <... mount resumed>) = 0 [pid 6160] <... mmap resumed>) = 0x7efd74b1c000 [pid 5065] <... close resumed>) = 0 [pid 6157] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] newfstatat(3, "", [pid 5065] rmdir("./58/bus" [pid 6161] <... prctl resumed>) = 0 [pid 5069] getdents64(3, [pid 6161] setpgid(0, 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6161] <... setpgid resumed>) = 0 [pid 5069] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6157] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6157] chdir("./bus" [pid 5065] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6157] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6157] ioctl(4, LOOP_CLR_FD [pid 5065] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6161] <... openat resumed>) = 3 [pid 6157] <... ioctl resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6161] write(3, "1000", 4 [pid 6157] close(4 [pid 6161] <... write resumed>) = 4 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] unlink("./58/binderfs" [pid 6161] close(3 [pid 5067] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6161] <... close resumed>) = 0 [pid 6157] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6161] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6161] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6161] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6162]}, 88) = 6162 [pid 6161] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] getdents64(3, [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6161] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] close(3 [pid 6161] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6162 attached [pid 6162] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6162] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6162] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6162] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 6157] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./58" [pid 6157] <... futex resumed>) = 1 [pid 6154] <... futex resumed>) = 0 [pid 6162] <... memfd_create resumed>) = 3 [pid 6154] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 6157] creat("./bus", 000 [pid 6154] <... futex resumed>) = 0 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6160] <... write resumed>) = 524288 [pid 6157] <... creat resumed>) = 4 [pid 6154] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] mkdir("./59", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6160] munmap(0x7efd74b1c000, 138412032 [pid 6157] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] <... futex resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6154] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6157] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6154] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6154] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6163 ./strace-static-x86_64: Process 6163 attached [pid 6160] <... munmap resumed>) = 0 [ 129.465031][ T58] hfsplus: b-tree write err: -5, ino 4 [ 129.465160][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6162] <... write resumed>) = 524288 [pid 6163] set_robust_list(0x555555fbc6a0, 24 [pid 6160] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 6162] munmap(0x7efd74b1c000, 138412032 [pid 5069] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6162] <... munmap resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6162] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5069] newfstatat(AT_FDCWD, "./59/bus", [pid 6162] <... openat resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 5069] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] <... set_robust_list resumed>) = 0 [pid 6160] <... openat resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6160] ioctl(4, LOOP_SET_FD, 3 [pid 6162] <... ioctl resumed>) = 0 [pid 6163] chdir("./59" [pid 6162] close(3) = 0 [pid 6162] mkdir("./bus", 0777) = 0 [pid 5067] newfstatat(AT_FDCWD, "./58/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] openat(AT_FDCWD, "./59/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./58/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./58/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] getdents64(4, [pid 5067] getdents64(4, [pid 6163] <... chdir resumed>) = 0 [pid 6160] <... ioctl resumed>) = 0 [pid 6154] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6154] <... futex resumed>) = 0 [pid 6154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6162] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6154] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6163] setpgid(0, 0 [pid 6160] close(3 [pid 6154] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] getdents64(4, [pid 5067] getdents64(4, [pid 6163] <... setpgid resumed>) = 0 [pid 6160] <... close resumed>) = 0 [pid 6154] <... mprotect resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6154] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] close(4 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6160] mkdir("./bus", 0777 [pid 6163] <... openat resumed>) = 3 [pid 6154] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] close(4 [pid 6163] write(3, "1000", 4 [pid 6162] <... mount resumed>) = 0 [pid 6160] <... mkdir resumed>) = 0 [pid 6154] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] rmdir("./59/bus") = 0 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6164 attached [pid 6163] <... write resumed>) = 4 [pid 6162] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6154] <... clone3 resumed> => {parent_tid=[6164]}, 88) = 6164 [ 129.519364][ T6157] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.547058][ T6157] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.552802][ T6162] loop3: detected capacity change from 0 to 1024 [ 129.562202][ T6160] loop1: detected capacity change from 0 to 1024 [pid 6160] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6162] <... openat resumed>) = 3 [pid 6164] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6163] close(3 [pid 6162] chdir("./bus" [pid 6160] <... mount resumed>) = 0 [pid 6154] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./58/bus" [pid 6164] <... rseq resumed>) = 0 [pid 6163] <... close resumed>) = 0 [pid 6162] <... chdir resumed>) = 0 [pid 6160] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6164] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6163] symlink("/dev/binderfs", "./binderfs" [pid 6162] ioctl(4, LOOP_CLR_FD [pid 6154] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6160] <... openat resumed>) = 3 [pid 6164] rt_sigprocmask(SIG_SETMASK, [], [pid 6163] <... symlink resumed>) = 0 [pid 6162] <... ioctl resumed>) = 0 [pid 6160] chdir("./bus" [pid 6154] <... futex resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6162] close(4 [pid 6160] <... chdir resumed>) = 0 [pid 6154] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6164] creat("./file1", 000 [pid 6163] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... close resumed>) = 0 [pid 6160] ioctl(4, LOOP_CLR_FD [pid 6163] <... futex resumed>) = 0 [pid 6162] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... ioctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6162] <... futex resumed>) = 1 [pid 6160] close(4 [pid 6163] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6162] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6160] <... close resumed>) = 0 [pid 6163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6160] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6159] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6161] <... futex resumed>) = 0 [pid 6160] creat("./bus", 000 [pid 6159] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(AT_FDCWD, "./59/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6161] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6162] <... futex resumed>) = 0 [pid 6161] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] creat("./bus", 000 [pid 6160] <... creat resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] newfstatat(AT_FDCWD, "./58/binderfs", [pid 6162] <... creat resumed>) = 4 [pid 6160] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = 0 [pid 6159] <... futex resumed>) = 0 [pid 6163] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6162] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6159] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6163] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6162] <... futex resumed>) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6163] <... mprotect resumed>) = 0 [pid 6162] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6161] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] unlink("./59/binderfs" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6161] <... futex resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] unlink("./58/binderfs" [pid 6161] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [ 129.601926][ T6157] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.609274][ T6157] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6163] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5069] close(3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] close(3 [pid 5069] rmdir("./59" [pid 5067] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] rmdir("./58" [pid 6163] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6154] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... rmdir resumed>) = 0 [pid 6163] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] mkdir("./60", 0777 [pid 6163] <... clone3 resumed> => {parent_tid=[6165]}, 88) = 6165 ./strace-static-x86_64: Process 6165 attached [pid 6163] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... mkdir resumed>) = 0 [pid 5067] mkdir("./59", 0777 [pid 6163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] <... mkdir resumed>) = 0 [pid 6165] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6163] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6165] <... rseq resumed>) = 0 [pid 6163] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6165] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6163] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6161] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6166 attached [pid 6166] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6166] chdir("./59" [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6166 [ 129.665275][ T6157] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.673202][ T6160] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.692376][ T6162] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.702010][ T6162] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6166] <... chdir resumed>) = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6165] <... set_robust_list resumed>) = 0 [pid 6161] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6167 [pid 6166] <... prctl resumed>) = 0 [pid 6166] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 6167 attached [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6167] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6167] chdir("./60" [pid 6166] <... openat resumed>) = 3 [pid 6159] <... futex resumed>) = 0 [pid 6165] rt_sigprocmask(SIG_SETMASK, [], [pid 6161] <... futex resumed>) = 0 [pid 6159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6159] <... mmap resumed>) = 0x7efd7cefb000 [pid 6167] <... chdir resumed>) = 0 [pid 6166] write(3, "1000", 4 [pid 6165] memfd_create("syzkaller", 0 [pid 6161] <... mmap resumed>) = 0x7efd7cefb000 [pid 6159] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6166] <... write resumed>) = 4 [pid 6165] <... memfd_create resumed>) = 3 [pid 6167] <... prctl resumed>) = 0 [pid 6166] close(3 [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6161] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6159] <... mprotect resumed>) = 0 [pid 6167] setpgid(0, 0 [pid 6166] <... close resumed>) = 0 [pid 6165] <... mmap resumed>) = 0x7efd74b1c000 [pid 6161] <... mprotect resumed>) = 0 [pid 6159] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6167] <... setpgid resumed>) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs" [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6166] <... symlink resumed>) = 0 [pid 6167] <... openat resumed>) = 3 [pid 6166] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6159] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6167] write(3, "1000", 4 [pid 6166] <... futex resumed>) = 0 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6161] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6164] <... creat resumed>) = 5 [pid 6159] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6157] <... write resumed>) = 57344 [pid 6166] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6161] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6157] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6168 attached [pid 6167] <... write resumed>) = 4 [pid 6166] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6157] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6169 attached [pid 6168] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6167] close(3 [pid 6166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6164] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] <... clone3 resumed> => {parent_tid=[6168]}, 88) = 6168 [pid 6157] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] <... rseq resumed>) = 0 [pid 6164] <... futex resumed>) = 0 [pid 6161] <... clone3 resumed> => {parent_tid=[6169]}, 88) = 6169 [pid 6154] exit_group(0 [pid 6168] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6161] rt_sigprocmask(SIG_SETMASK, [], [pid 6159] rt_sigprocmask(SIG_SETMASK, [], [pid 6154] <... exit_group resumed>) = ? [pid 6168] <... set_robust_list resumed>) = 0 [pid 6161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6164] +++ exited with 0 +++ [pid 6161] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] rt_sigprocmask(SIG_SETMASK, [], [pid 6159] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6161] <... futex resumed>) = 0 [pid 6168] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6161] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] creat("./file1", 000 [pid 6159] <... futex resumed>) = 0 [pid 6169] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6167] <... close resumed>) = 0 [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6159] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6157] <... futex resumed>) = ? [pid 6169] <... rseq resumed>) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs" [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6169] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6167] <... symlink resumed>) = 0 [ 129.709385][ T6157] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.716877][ T6160] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.725258][ T6162] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.739424][ T6160] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6166] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6169] <... set_robust_list resumed>) = 0 [pid 6166] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6169] rt_sigprocmask(SIG_SETMASK, [], [pid 6166] <... mprotect resumed>) = 0 [pid 6169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6167] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6169] creat("./file1", 000 [pid 6167] <... futex resumed>) = 0 [pid 6166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6167] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6157] +++ exited with 0 +++ [pid 6154] +++ exited with 0 +++ [pid 6167] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6170 attached [pid 6167] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6165] <... write resumed>) = 524288 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6170] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] <... clone3 resumed> => {parent_tid=[6170]}, 88) = 6170 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 6170] <... rseq resumed>) = 0 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], [pid 6170] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6167] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... restart_syscall resumed>) = 0 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6167] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6166] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], [pid 6169] <... creat resumed>) = 5 [pid 6167] <... mprotect resumed>) = 0 [pid 6166] <... futex resumed>) = 0 [pid 6170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6169] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6166] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6170] memfd_create("syzkaller", 0 [pid 6169] <... futex resumed>) = 1 [pid 6167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6170] <... memfd_create resumed>) = 3 [pid 6169] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6171 attached ) = 0x7efd74b1c000 [pid 6165] munmap(0x7efd74b1c000, 138412032 [pid 6161] <... futex resumed>) = 0 [pid 5070] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6167] <... clone3 resumed> => {parent_tid=[6171]}, 88) = 6171 [pid 6171] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... openat resumed>) = 3 [pid 6171] <... rseq resumed>) = 0 [pid 6167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6165] <... munmap resumed>) = 0 [pid 5070] newfstatat(3, "", [pid 6171] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6168] <... creat resumed>) = 5 [pid 6167] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6171] rt_sigprocmask(SIG_SETMASK, [], [pid 6167] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 6171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6167] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6171] memfd_create("syzkaller", 0) = 3 [pid 6171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6168] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6159] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 129.762787][ T6162] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.776191][ T6160] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.793979][ T6162] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.808359][ T6160] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6168] <... futex resumed>) = 0 [pid 6165] <... openat resumed>) = 4 [pid 6170] <... write resumed>) = 524288 [pid 6171] <... write resumed>) = 524288 [pid 6168] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6170] munmap(0x7efd74b1c000, 138412032 [pid 6165] ioctl(4, LOOP_SET_FD, 3 [pid 6171] munmap(0x7efd74b1c000, 138412032 [pid 6170] <... munmap resumed>) = 0 [pid 6162] <... write resumed>) = 57344 [pid 6160] <... write resumed>) = 57344 [pid 6171] <... munmap resumed>) = 0 [pid 6162] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 6165] <... ioctl resumed>) = 0 [pid 6162] <... futex resumed>) = 0 [pid 6161] exit_group(0 [pid 6160] <... futex resumed>) = 0 [pid 6159] exit_group(0 [pid 6165] close(3 [pid 6162] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] <... exit_group resumed>) = ? [pid 6168] <... futex resumed>) = ? [pid 6165] <... close resumed>) = 0 [pid 6171] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6169] <... futex resumed>) = ? [pid 6168] +++ exited with 0 +++ [pid 6165] mkdir("./bus", 0777 [pid 6162] <... futex resumed>) = ? [pid 6161] <... exit_group resumed>) = ? [pid 6160] +++ exited with 0 +++ [pid 6171] <... openat resumed>) = 4 [pid 6170] <... openat resumed>) = 4 [pid 6169] +++ exited with 0 +++ [pid 6165] <... mkdir resumed>) = 0 [pid 6162] +++ exited with 0 +++ [pid 6161] +++ exited with 0 +++ [pid 6159] +++ exited with 0 +++ [pid 6171] ioctl(4, LOOP_SET_FD, 3 [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6165] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [ 129.819512][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 129.825240][ T6162] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.836763][ T6160] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.855478][ T6165] loop0: detected capacity change from 0 to 1024 [pid 6165] <... mount resumed>) = 0 [pid 5070] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6165] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./60/bus", [pid 5068] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 6165] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(3, "", [pid 6165] chdir("./bus" [pid 5070] openat(AT_FDCWD, "./60/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6165] <... chdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6165] ioctl(4, LOOP_CLR_FD [pid 5070] <... openat resumed>) = 4 [pid 5066] getdents64(3, [pid 6165] <... ioctl resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 6165] close(4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6165] <... close resumed>) = 0 [pid 5070] getdents64(4, [pid 5068] <... openat resumed>) = 3 [pid 6171] <... ioctl resumed>) = 0 [pid 6165] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] newfstatat(3, "", [pid 5066] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6171] close(3 [pid 6165] <... futex resumed>) = 1 [pid 6163] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6171] <... close resumed>) = 0 [pid 6163] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 6171] mkdir("./bus", 0777 [pid 6163] <... futex resumed>) = 0 [pid 6171] <... mkdir resumed>) = 0 [pid 6170] <... ioctl resumed>) = 0 [pid 6171] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6170] close(3) = 0 [pid 6170] mkdir("./bus", 0777) = 0 [pid 6163] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] creat("./bus", 000 [pid 5070] close(4 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6171] <... mount resumed>) = 0 [pid 6170] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6165] <... creat resumed>) = 4 [pid 5070] <... close resumed>) = 0 [pid 5068] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6171] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6165] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./60/bus" [pid 6171] <... openat resumed>) = 3 [pid 6171] chdir("./bus") = 0 [pid 6171] ioctl(4, LOOP_CLR_FD) = 0 [pid 6165] <... futex resumed>) = 1 [pid 6163] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 6165] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6163] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6171] close(4 [pid 5070] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6171] <... close resumed>) = 0 [pid 5070] unlink("./60/binderfs" [pid 6171] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6171] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... unlink resumed>) = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3 [pid 6167] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 5070] rmdir("./60" [pid 6171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6171] creat("./bus", 000) = 4 [pid 5070] <... rmdir resumed>) = 0 [pid 5070] mkdir("./61", 0777 [pid 5066] <... umount2 resumed>) = 0 [pid 6171] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] <... futex resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 6171] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6167] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 129.877065][ T6171] loop4: detected capacity change from 0 to 1024 [ 129.885580][ T6170] loop2: detected capacity change from 0 to 1024 [ 129.901193][ T58] hfsplus: b-tree write err: -5, ino 4 [ 129.918868][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6167] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... mount resumed>) = 0 [pid 6170] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] chdir("./bus") = 0 [pid 6170] ioctl(4, LOOP_CLR_FD) = 0 [pid 6170] close(4) = 0 [pid 6170] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6170] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] <... futex resumed>) = 0 [pid 6163] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6163] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5066] newfstatat(AT_FDCWD, "./60/bus", [pid 6163] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6166] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] close(3 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6170] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 5068] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] creat("./bus", 000 [pid 6166] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6170] <... creat resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./60/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6170] <... futex resumed>) = 1 [pid 6167] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./60/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6170] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6167] <... futex resumed>) = 0 [pid 6166] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6166] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6167] <... mmap resumed>) = 0x7efd7cefb000 [pid 6166] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] newfstatat(4, "", [pid 6167] <... mprotect resumed>) = 0 [pid 5070] <... close resumed>) = 0 [ 129.939782][ T6165] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.946650][ T6171] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.971308][ T6165] hfsplus: request for non-existent node 16715520 in B*Tree [ 129.976614][ T6171] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6163] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6172 attached [pid 6167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6163] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6173 attached [pid 6172] set_robust_list(0x555555fbc6a0, 24 [pid 6167] <... clone3 resumed> => {parent_tid=[6173]}, 88) = 6173 [pid 6163] <... mprotect resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6172 [pid 5068] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6173] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6163] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6173] <... rseq resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./60/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6163] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6172] <... set_robust_list resumed>) = 0 [pid 6173] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6163] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6173] <... set_robust_list resumed>) = 0 [pid 6167] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6173] rt_sigprocmask(SIG_SETMASK, [], [pid 6172] chdir("./61" [pid 6163] <... clone3 resumed> => {parent_tid=[6174]}, 88) = 6174 ./strace-static-x86_64: Process 6174 attached [pid 6173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] newfstatat(4, "", [pid 6172] <... chdir resumed>) = 0 [pid 6163] rt_sigprocmask(SIG_SETMASK, [], [pid 6173] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6163] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6163] <... futex resumed>) = 0 [pid 6172] <... prctl resumed>) = 0 [pid 6163] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] getdents64(4, [pid 6174] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6172] setpgid(0, 0 [pid 6167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] close(4 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [ 129.987671][ T6165] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.003495][ T6170] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.010831][ T6170] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.014337][ T6165] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6167] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... close resumed>) = 0 [pid 6167] <... futex resumed>) = 1 [pid 6166] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./60/bus" [pid 6174] <... rseq resumed>) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6172] <... setpgid resumed>) = 0 [pid 6167] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 6174] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6173] creat("./file1", 000 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6174] <... set_robust_list resumed>) = 0 [pid 6166] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6174] rt_sigprocmask(SIG_SETMASK, [], [pid 6172] <... openat resumed>) = 3 [pid 6166] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5066] close(4 [pid 6174] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6166] <... mprotect resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6174] creat("./file1", 000 [pid 6166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] rmdir("./60/bus" [pid 6174] <... creat resumed>) = 5 [pid 6172] write(3, "1000", 4 [pid 6166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] unlink("./60/binderfs" [pid 6174] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... write resumed>) = 4 [pid 6166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... unlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] getdents64(3, [pid 6166] <... clone3 resumed> => {parent_tid=[6175]}, 88) = 6175 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] close(3 [pid 6166] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 6166] <... futex resumed>) = 0 [pid 5068] rmdir("./60"./strace-static-x86_64: Process 6175 attached [pid 6174] <... futex resumed>) = 1 [pid 6172] close(3 [pid 6166] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6163] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./61", 0777) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6175] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6174] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6175] <... rseq resumed>) = 0 [pid 6172] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... openat resumed>) = 3 [pid 6175] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5066] newfstatat(AT_FDCWD, "./60/binderfs", [pid 6175] <... set_robust_list resumed>) = 0 [pid 6172] <... symlink resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6175] rt_sigprocmask(SIG_SETMASK, [], [pid 6172] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6172] <... futex resumed>) = 0 [pid 5068] close(3 [pid 5066] unlink("./60/binderfs" [pid 6175] creat("./file1", 000 [pid 6172] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6172] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6172] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6176 [ 130.039923][ T6171] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.061117][ T6165] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.068699][ T6165] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.074674][ T6171] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6176 attached [pid 6175] <... creat resumed>) = 5 [pid 6172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6165] <... write resumed>) = 57344 [pid 5066] getdents64(3, [pid 6176] set_robust_list(0x555555fbc6a0, 24 [pid 6175] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6176] <... set_robust_list resumed>) = 0 [pid 6175] <... futex resumed>) = 1 [pid 6172] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6166] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6175] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] close(3 [pid 6176] chdir("./61" [pid 6172] <... mprotect resumed>) = 0 [pid 6165] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 6176] <... chdir resumed>) = 0 [pid 6172] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6165] <... futex resumed>) = 0 [pid 6163] exit_group(0 [pid 5066] rmdir("./60" [pid 6176] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6174] <... futex resumed>) = ? [pid 6172] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6163] <... exit_group resumed>) = ? [pid 6176] <... prctl resumed>) = 0 [pid 6174] +++ exited with 0 +++ [pid 6176] setpgid(0, 0 [pid 6172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] <... rmdir resumed>) = 0 [pid 6176] <... setpgid resumed>) = 0 [pid 6176] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6176] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6177 attached [pid 6176] close(3 [pid 6173] <... creat resumed>) = 5 [pid 6172] <... clone3 resumed> => {parent_tid=[6177]}, 88) = 6177 [pid 6165] +++ exited with 0 +++ [pid 6163] +++ exited with 0 +++ [pid 5066] mkdir("./61", 0777 [pid 6177] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6176] <... close resumed>) = 0 [pid 6173] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] rt_sigprocmask(SIG_SETMASK, [], [pid 6177] <... rseq resumed>) = 0 [pid 6176] symlink("/dev/binderfs", "./binderfs" [pid 6173] <... futex resumed>) = 0 [pid 6172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6177] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6176] <... symlink resumed>) = 0 [pid 6173] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... mkdir resumed>) = 0 [pid 6177] <... set_robust_list resumed>) = 0 [pid 6176] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... futex resumed>) = 0 [pid 6177] rt_sigprocmask(SIG_SETMASK, [], [pid 6176] <... futex resumed>) = 0 [pid 6172] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6176] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... openat resumed>) = 3 [pid 5065] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6177] memfd_create("syzkaller", 0 [pid 6176] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6177] <... memfd_create resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6176] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] <... openat resumed>) = 3 [pid 6177] <... mmap resumed>) = 0x7efd74b1c000 [pid 5065] newfstatat(3, "", [pid 6176] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 130.095555][ T6170] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.118304][ T6170] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6176] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6176] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5065] getdents64(3, [pid 6176] <... mprotect resumed>) = 0 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6176] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6176] <... clone3 resumed> => {parent_tid=[6178]}, 88) = 6178 [pid 6176] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] close(3 [pid 6176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6176] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 6178 attached [pid 6176] <... futex resumed>) = 0 [pid 6178] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6176] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6178] <... rseq resumed>) = 0 [pid 6178] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6178] memfd_create("syzkaller", 0) = 3 [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6179 attached [pid 6171] <... write resumed>) = 57344 [pid 6171] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6179 [pid 6179] set_robust_list(0x555555fbc6a0, 24 [pid 6171] <... futex resumed>) = 0 [pid 6171] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] <... set_robust_list resumed>) = 0 [pid 6167] exit_group(0 [ 130.141237][ T6171] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.158824][ T6171] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.170389][ T6170] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.171754][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6179] chdir("./61" [pid 6173] <... futex resumed>) = ? [pid 6167] <... exit_group resumed>) = ? [pid 6179] <... chdir resumed>) = 0 [pid 6177] <... write resumed>) = 524288 [pid 6171] <... futex resumed>) = ? [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6173] +++ exited with 0 +++ [pid 6171] +++ exited with 0 +++ [pid 6167] +++ exited with 0 +++ [pid 6179] <... prctl resumed>) = 0 [pid 6179] setpgid(0, 0) = 0 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6178] <... write resumed>) = 524288 [pid 6179] <... openat resumed>) = 3 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6179] write(3, "1000", 4) = 4 [pid 6179] close(3 [pid 5069] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6179] <... close resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6179] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6179] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6179] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6179] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6178] munmap(0x7efd74b1c000, 138412032 [pid 6179] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6178] <... munmap resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] newfstatat(3, "", [pid 6178] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6180 attached [pid 6179] <... clone3 resumed> => {parent_tid=[6180]}, 88) = 6180 [pid 6178] <... openat resumed>) = 4 [pid 5069] getdents64(3, [pid 6180] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6179] rt_sigprocmask(SIG_SETMASK, [], [pid 6178] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6180] <... rseq resumed>) = 0 [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6177] munmap(0x7efd74b1c000, 138412032 [pid 6180] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6179] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... write resumed>) = 57344 [pid 5069] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] <... set_robust_list resumed>) = 0 [pid 6179] <... futex resumed>) = 0 [pid 6177] <... munmap resumed>) = 0 [pid 6170] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] exit_group(0 [pid 6180] rt_sigprocmask(SIG_SETMASK, [], [pid 6179] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6177] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6175] <... futex resumed>) = ? [pid 6170] <... futex resumed>) = ? [pid 6166] <... exit_group resumed>) = ? [pid 6180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6177] <... openat resumed>) = 4 [pid 6175] +++ exited with 0 +++ [pid 6170] +++ exited with 0 +++ [pid 6180] memfd_create("syzkaller", 0) = 3 [pid 6177] ioctl(4, LOOP_SET_FD, 3 [ 130.197930][ T6170] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.229951][ T6178] loop3: detected capacity change from 0 to 1024 [pid 6180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6178] <... ioctl resumed>) = 0 [pid 6178] close(3) = 0 [pid 6178] mkdir("./bus", 0777) = 0 [pid 6166] +++ exited with 0 +++ [pid 5069] <... umount2 resumed>) = 0 [pid 6180] <... write resumed>) = 524288 [pid 5069] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./60/bus", [pid 6178] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./60/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6177] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(4, "", [pid 5067] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6177] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6177] <... close resumed>) = 0 [pid 5069] getdents64(4, [pid 5067] newfstatat(3, "", [pid 6177] mkdir("./bus", 0777 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(4, [pid 5067] getdents64(3, [pid 6177] <... mkdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] newfstatat(AT_FDCWD, "./59/bus", [pid 5069] close(4 [pid 5067] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./60/bus") = 0 [pid 5069] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6180] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 130.243668][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 130.259263][ T6177] loop5: detected capacity change from 0 to 1024 [pid 5069] newfstatat(AT_FDCWD, "./60/binderfs", [pid 6180] <... munmap resumed>) = 0 [pid 6178] <... mount resumed>) = 0 [pid 6177] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./60/binderfs" [pid 6178] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... unlink resumed>) = 0 [pid 5065] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6178] <... openat resumed>) = 3 [pid 6180] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6178] chdir("./bus" [pid 5069] close(3 [pid 5065] openat(AT_FDCWD, "./59/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6178] <... chdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6178] ioctl(4, LOOP_CLR_FD [pid 5069] rmdir("./60" [pid 6178] <... ioctl resumed>) = 0 [pid 6177] <... mount resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6180] <... openat resumed>) = 4 [pid 6178] close(4 [pid 6177] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] mkdir("./61", 0777 [pid 5065] newfstatat(4, "", [pid 6180] ioctl(4, LOOP_SET_FD, 3 [pid 6178] <... close resumed>) = 0 [pid 6177] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 6177] chdir("./bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6177] <... chdir resumed>) = 0 [pid 6180] <... ioctl resumed>) = 0 [pid 6178] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(4, [pid 6178] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6178] creat("./bus", 000 [pid 6176] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6178] <... creat resumed>) = 4 [pid 6176] <... futex resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 6178] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6178] <... futex resumed>) = 0 [pid 6177] ioctl(4, LOOP_CLR_FD [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6178] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6176] <... futex resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6178] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6176] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6177] <... ioctl resumed>) = 0 [pid 5065] close(4 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6181 [pid 6177] close(4 [pid 5065] <... close resumed>) = 0 ./strace-static-x86_64: Process 6181 attached [ 130.309419][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 130.334014][ T6180] loop1: detected capacity change from 0 to 1024 [pid 6181] set_robust_list(0x555555fbc6a0, 24 [pid 6180] close(3 [pid 6177] <... close resumed>) = 0 [pid 5065] rmdir("./59/bus" [pid 5067] <... umount2 resumed>) = 0 [pid 6181] <... set_robust_list resumed>) = 0 [pid 6180] <... close resumed>) = 0 [pid 6181] chdir("./61" [pid 6180] mkdir("./bus", 0777 [pid 6177] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 6181] <... chdir resumed>) = 0 [pid 6180] <... mkdir resumed>) = 0 [pid 6177] <... futex resumed>) = 1 [pid 6172] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] <... prctl resumed>) = 0 [pid 6181] setpgid(0, 0) = 0 [pid 6181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6181] write(3, "1000", 4) = 4 [pid 6181] close(3) = 0 [pid 6181] symlink("/dev/binderfs", "./binderfs" [pid 6180] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] newfstatat(AT_FDCWD, "./59/bus", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] <... symlink resumed>) = 0 [pid 6177] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6181] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = 0 [pid 6172] <... futex resumed>) = 1 [pid 5067] umount2("./59/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6181] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] unlink("./59/binderfs" [pid 6177] creat("./bus", 000 [pid 6181] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] <... unlink resumed>) = 0 [pid 6181] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6181] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6177] <... creat resumed>) = 4 [pid 5065] getdents64(3, [pid 6181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6177] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] openat(AT_FDCWD, "./59/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6177] <... futex resumed>) = 0 [pid 6176] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6181] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6177] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 4 [pid 5065] close(3 [pid 6181] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6180] <... mount resumed>) = 0 [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6176] <... futex resumed>) = 0 [pid 6172] <... futex resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 5065] <... close resumed>) = 0 [pid 6181] <... mprotect resumed>) = 0 [pid 6180] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6177] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6176] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6172] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] rmdir("./59" [pid 6181] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6180] <... openat resumed>) = 3 [pid 6176] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6181] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6180] chdir("./bus" [pid 6181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6180] <... chdir resumed>) = 0 [pid 6176] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6180] ioctl(4, LOOP_CLR_FD [pid 6176] <... mprotect resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6182 attached [pid 6181] <... clone3 resumed> => {parent_tid=[6182]}, 88) = 6182 [pid 6180] <... ioctl resumed>) = 0 [pid 6176] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] mkdir("./60", 0777 [pid 6182] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6181] rt_sigprocmask(SIG_SETMASK, [], [pid 6180] close(4 [pid 6176] <... rt_sigprocmask resumed>[], 8) = 0 [ 130.375650][ T6178] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.392169][ T6178] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.399802][ T6178] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] getdents64(4, [pid 6182] <... rseq resumed>) = 0 [pid 6181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6180] <... close resumed>) = 0 [pid 6176] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... mkdir resumed>) = 0 [pid 6181] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = 0 [pid 6180] <... futex resumed>) = 1 [pid 6176] <... clone3 resumed> => {parent_tid=[6183]}, 88) = 6183 [pid 6182] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6181] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6180] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6183 attached [pid 6182] <... set_robust_list resumed>) = 0 [pid 6179] <... futex resumed>) = 0 [pid 6176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6179] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6182] rt_sigprocmask(SIG_SETMASK, [], [pid 6180] <... futex resumed>) = 0 [pid 6179] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = 0 [pid 6183] <... rseq resumed>) = 0 [pid 6182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6180] creat("./bus", 000 [pid 6179] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6183] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6182] memfd_create("syzkaller", 0 [pid 6180] <... creat resumed>) = 4 [pid 6183] <... set_robust_list resumed>) = 0 [pid 6182] <... memfd_create resumed>) = 3 [pid 6180] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] rt_sigprocmask(SIG_SETMASK, [], [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6180] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 6183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6182] <... mmap resumed>) = 0x7efd74b1c000 [pid 6180] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6179] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] creat("./file1", 000 [pid 6179] <... futex resumed>) = 0 [pid 5067] close(4 [pid 5065] <... openat resumed>) = 3 [pid 6179] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6182] <... write resumed>) = 524288 [pid 6172] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] rmdir("./59/bus" [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6172] <... futex resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 6172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [ 130.452371][ T6177] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.459852][ T6177] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.482031][ T6178] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.493714][ T6180] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6172] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6176] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6172] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] newfstatat(AT_FDCWD, "./59/binderfs", [pid 6182] munmap(0x7efd74b1c000, 138412032 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6179] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6184 ./strace-static-x86_64: Process 6184 attached [pid 6172] <... mprotect resumed>) = 0 [pid 5067] unlink("./59/binderfs" [pid 6184] set_robust_list(0x555555fbc6a0, 24 [pid 6182] <... munmap resumed>) = 0 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6172] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6185 attached [pid 6184] <... set_robust_list resumed>) = 0 [pid 6179] <... mmap resumed>) = 0x7efd7cefb000 [pid 6172] <... clone3 resumed> => {parent_tid=[6185]}, 88) = 6185 [pid 5067] getdents64(3, [pid 6179] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6172] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6184] chdir("./60" [pid 6185] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] close(3 [pid 6185] <... rseq resumed>) = 0 [pid 6184] <... chdir resumed>) = 0 [ 130.526330][ T6178] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.542036][ T6177] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.549377][ T6177] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.551614][ T6180] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6185] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6179] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6172] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... close resumed>) = 0 [pid 6179] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6182] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6179] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6185] rt_sigprocmask(SIG_SETMASK, [], [pid 6184] <... prctl resumed>) = 0 [pid 6182] <... openat resumed>) = 4 [pid 6172] <... futex resumed>) = 0 [pid 5067] rmdir("./59" [pid 6184] setpgid(0, 0 [pid 6172] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6186 attached [pid 6185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6184] <... setpgid resumed>) = 0 [pid 6183] <... creat resumed>) = 5 [pid 6179] <... clone3 resumed> => {parent_tid=[6186]}, 88) = 6186 [pid 6178] <... write resumed>) = 57344 [pid 5067] <... rmdir resumed>) = 0 [pid 6185] creat("./file1", 000 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 6179] rt_sigprocmask(SIG_SETMASK, [], [pid 6178] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] mkdir("./60", 0777 [pid 6184] <... openat resumed>) = 3 [pid 6183] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... ioctl resumed>) = 0 [pid 6179] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6178] <... futex resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6184] write(3, "1000", 4 [pid 6183] <... futex resumed>) = 0 [pid 6179] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] exit_group(0 [pid 6184] <... write resumed>) = 4 [pid 6178] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6186] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6179] <... futex resumed>) = 0 [pid 6176] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 6178] <... futex resumed>) = ? [pid 6186] <... rseq resumed>) = 0 [pid 6184] close(3 [pid 6183] +++ exited with 0 +++ [pid 6179] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6184] <... close resumed>) = 0 [pid 6178] +++ exited with 0 +++ [pid 6176] +++ exited with 0 +++ [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6186] <... set_robust_list resumed>) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6186] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6176, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [ 130.571027][ T6178] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.591363][ T6182] loop4: detected capacity change from 0 to 1024 [ 130.615721][ T6180] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6186] creat("./file1", 000 [pid 6184] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5068] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... close resumed>) = 0 [pid 5068] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6184] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... creat resumed>) = 5 [pid 6184] <... futex resumed>) = 0 [pid 6184] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6182] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6187 [pid 6182] <... close resumed>) = 0 [pid 6172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6182] mkdir("./bus", 0777./strace-static-x86_64: Process 6187 attached [pid 6185] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6182] <... mkdir resumed>) = 0 [pid 6187] set_robust_list(0x555555fbc6a0, 24 [pid 6185] <... futex resumed>) = 0 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6187] <... set_robust_list resumed>) = 0 [pid 6185] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6187] chdir("./60" [pid 6184] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6182] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6187] <... chdir resumed>) = 0 [pid 6184] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6184] <... mprotect resumed>) = 0 [pid 6179] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6187] <... prctl resumed>) = 0 [pid 6184] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6187] setpgid(0, 0 [pid 6184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6188 attached [pid 6187] <... setpgid resumed>) = 0 [pid 6188] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6188] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6184] <... clone3 resumed> => {parent_tid=[6188]}, 88) = 6188 [pid 6188] <... set_robust_list resumed>) = 0 [pid 6187] <... openat resumed>) = 3 [pid 6186] <... creat resumed>) = 5 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], [pid 6182] <... mount resumed>) = 0 [pid 6188] rt_sigprocmask(SIG_SETMASK, [], [pid 6186] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6186] <... futex resumed>) = 0 [pid 6184] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] <... futex resumed>) = 0 [pid 6188] memfd_create("syzkaller", 0 [pid 6184] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 130.632227][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 130.656791][ T6177] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.658905][ T6180] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6182] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6188] <... memfd_create resumed>) = 3 [pid 6187] write(3, "1000", 4 [pid 6182] <... openat resumed>) = 3 [pid 6182] chdir("./bus" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6182] <... chdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./61/bus", [pid 6182] ioctl(4, LOOP_CLR_FD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6182] <... ioctl resumed>) = 0 [pid 6182] close(4) = 0 [pid 6182] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6181] <... futex resumed>) = 0 [pid 6182] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6187] <... write resumed>) = 4 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6188] <... mmap resumed>) = 0x7efd74b1c000 [pid 6187] close(3) = 0 [pid 6182] creat("./bus", 000 [pid 6181] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6177] <... write resumed>) = 57344 [pid 5068] openat(AT_FDCWD, "./61/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6187] symlink("/dev/binderfs", "./binderfs" [pid 6182] <... creat resumed>) = 4 [pid 6182] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 4 [pid 6187] <... symlink resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] <... futex resumed>) = 0 [pid 6187] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] newfstatat(4, "", [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6187] <... futex resumed>) = 0 [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 130.692333][ T6180] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.696632][ T6177] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.710415][ T6180] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6182] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6187] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6181] <... futex resumed>) = 0 [pid 6187] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6181] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] getdents64(4, [pid 6187] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6177] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6177] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] exit_group(0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 6185] <... futex resumed>) = ? [pid 6177] <... futex resumed>) = ? [pid 6172] <... exit_group resumed>) = ? [pid 5068] <... close resumed>) = 0 [pid 6177] +++ exited with 0 +++ [pid 5068] rmdir("./61/bus") = 0 [pid 5068] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./61/binderfs" [pid 6187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6185] +++ exited with 0 +++ [pid 6172] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6187] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6187] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6187] <... mprotect resumed>) = 0 [pid 6180] <... write resumed>) = 57344 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... unlink resumed>) = 0 [pid 6180] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] exit_group(0 [pid 5070] newfstatat(3, "", [pid 6187] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6186] <... futex resumed>) = ? [pid 6180] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6187] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6186] +++ exited with 0 +++ [pid 6180] +++ exited with 0 +++ [pid 6179] +++ exited with 0 +++ [pid 5070] getdents64(3, [pid 5068] getdents64(3, [pid 6188] <... write resumed>) = 524288 [pid 6187] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [ 130.737177][ T6182] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6187] <... clone3 resumed> => {parent_tid=[6189]}, 88) = 6189 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6187] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] close(3 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6188] munmap(0x7efd74b1c000, 138412032 [pid 6187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5068] rmdir("./61" [pid 6188] <... munmap resumed>) = 0 [pid 6187] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rmdir resumed>) = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6187] <... futex resumed>) = 0 [pid 6181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] mkdir("./62", 0777 [pid 5066] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6188] <... openat resumed>) = 4 [pid 6187] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6181] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6188] ioctl(4, LOOP_SET_FD, 3 [pid 6181] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6189 attached [pid 6181] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6189] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6181] <... mmap resumed>) = 0x7efd7cefb000 [pid 6189] <... rseq resumed>) = 0 [pid 6181] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 6189] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6181] <... mprotect resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] newfstatat(3, "", [pid 6189] <... set_robust_list resumed>) = 0 [pid 6181] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... ioctl resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6189] rt_sigprocmask(SIG_SETMASK, [], [pid 6181] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] close(3 [pid 5066] getdents64(3, [pid 6189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6181] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... umount2 resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6189] memfd_create("syzkaller", 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6191 attached ./strace-static-x86_64: Process 6190 attached [pid 6189] <... memfd_create resumed>) = 3 [pid 6188] <... ioctl resumed>) = 0 [pid 6181] <... clone3 resumed> => {parent_tid=[6190]}, 88) = 6190 [pid 5070] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] set_robust_list(0x555555fbc6a0, 24 [pid 6190] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6181] rt_sigprocmask(SIG_SETMASK, [], [pid 6191] <... set_robust_list resumed>) = 0 [pid 6190] <... rseq resumed>) = 0 [pid 6188] close(3 [pid 6181] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 130.764422][ T6182] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.774785][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 130.788454][ T6188] loop0: detected capacity change from 0 to 1024 [pid 6190] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6181] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6191 [pid 6191] chdir("./62" [pid 6188] <... close resumed>) = 0 [pid 6191] <... chdir resumed>) = 0 [pid 6190] <... set_robust_list resumed>) = 0 [pid 6188] mkdir("./bus", 0777 [pid 6181] <... futex resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./61/bus", [pid 6191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6190] rt_sigprocmask(SIG_SETMASK, [], [pid 6188] <... mkdir resumed>) = 0 [pid 6181] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6191] setpgid(0, 0 [pid 6190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6190] creat("./file1", 000 [pid 6189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6189] <... write resumed>) = 524288 [pid 5070] openat(AT_FDCWD, "./61/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6191] <... setpgid resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./61/bus") = 0 [pid 5070] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6191] <... openat resumed>) = 3 [pid 6188] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6191] write(3, "1000", 4 [pid 5070] unlink("./61/binderfs" [pid 6191] <... write resumed>) = 4 [pid 5070] <... unlink resumed>) = 0 [pid 6191] close(3) = 0 [pid 6188] <... mount resumed>) = 0 [pid 5070] getdents64(3, [pid 6191] symlink("/dev/binderfs", "./binderfs" [pid 6188] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6189] munmap(0x7efd74b1c000, 138412032 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6191] <... symlink resumed>) = 0 [pid 6189] <... munmap resumed>) = 0 [pid 6188] <... openat resumed>) = 3 [pid 5070] close(3 [pid 6191] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] chdir("./bus" [pid 5070] <... close resumed>) = 0 [pid 6191] <... futex resumed>) = 0 [pid 6188] <... chdir resumed>) = 0 [pid 5070] rmdir("./61" [pid 6191] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6188] ioctl(4, LOOP_CLR_FD [pid 5070] <... rmdir resumed>) = 0 [pid 6191] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6188] <... ioctl resumed>) = 0 [pid 5070] mkdir("./62", 0777 [pid 6191] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6189] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6188] close(4 [pid 6181] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... mkdir resumed>) = 0 [pid 6189] <... openat resumed>) = 4 [pid 6189] ioctl(4, LOOP_SET_FD, 3 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... umount2 resumed>) = 0 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [ 130.808646][ T6182] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.825063][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 130.846129][ T6182] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6188] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6190] <... creat resumed>) = 5 [pid 6190] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6190] <... futex resumed>) = 0 [pid 6188] <... futex resumed>) = 1 [pid 6184] <... futex resumed>) = 0 [pid 6191] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6192 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6188] creat("./bus", 000 [pid 6184] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6188] <... creat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6184] <... futex resumed>) = 0 [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6188] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6193 attached [pid 6190] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] <... ioctl resumed>) = 0 [pid 6188] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] newfstatat(AT_FDCWD, "./61/bus", [pid 6193] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6191] <... clone3 resumed> => {parent_tid=[6193]}, 88) = 6193 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 6192 attached [pid 6193] <... rseq resumed>) = 0 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6189] close(3 [pid 6184] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6193] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] <... futex resumed>) = 0 [pid 6184] <... futex resumed>) = 1 [pid 6193] <... set_robust_list resumed>) = 0 [pid 6191] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6184] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] rt_sigprocmask(SIG_SETMASK, [], [pid 6191] <... futex resumed>) = 0 [pid 6189] <... close resumed>) = 0 [pid 5066] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6191] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6193] memfd_create("syzkaller", 0 [pid 6192] set_robust_list(0x555555fbc6a0, 24 [pid 6189] mkdir("./bus", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] <... memfd_create resumed>) = 3 [pid 6189] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./61/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6192] <... set_robust_list resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6192] chdir("./62" [pid 5066] newfstatat(4, "", [pid 6193] <... mmap resumed>) = 0x7efd74b1c000 [pid 6192] <... chdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6189] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] getdents64(4, [pid 6192] <... prctl resumed>) = 0 [ 130.887566][ T6189] loop2: detected capacity change from 0 to 1024 [ 130.903208][ T6182] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.910543][ T6182] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6192] setpgid(0, 0 [pid 5066] getdents64(4, [pid 6192] <... setpgid resumed>) = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6192] <... openat resumed>) = 3 [pid 5066] close(4 [pid 6192] write(3, "1000", 4) = 4 [pid 5066] <... close resumed>) = 0 [pid 6192] close(3) = 0 [pid 5066] rmdir("./61/bus" [pid 6192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6192] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6192] <... futex resumed>) = 0 [pid 6192] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6192] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6192] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6189] <... mount resumed>) = 0 [pid 6192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6189] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6192] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6189] <... openat resumed>) = 3 [pid 6192] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6189] chdir("./bus" [pid 5066] unlink("./61/binderfs" [pid 6192] <... mprotect resumed>) = 0 [pid 6189] <... chdir resumed>) = 0 [pid 6182] <... write resumed>) = 57344 [pid 5066] <... unlink resumed>) = 0 [pid 6192] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6189] ioctl(4, LOOP_CLR_FD [pid 6182] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6189] <... ioctl resumed>) = 0 [pid 6182] <... futex resumed>) = 0 [pid 6193] <... write resumed>) = 524288 [pid 6192] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6189] close(4 [pid 6182] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6194 attached [pid 6189] <... close resumed>) = 0 [pid 6181] exit_group(0 [pid 5066] getdents64(3, [pid 6194] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6192] <... clone3 resumed> => {parent_tid=[6194]}, 88) = 6194 [pid 6190] <... futex resumed>) = ? [pid 6189] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = ? [pid 6181] <... exit_group resumed>) = ? [pid 6194] <... rseq resumed>) = 0 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], [pid 6190] +++ exited with 0 +++ [pid 6189] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6182] +++ exited with 0 +++ [pid 6181] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6194] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6189] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 6194] <... set_robust_list resumed>) = 0 [pid 6192] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6181, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5066] <... close resumed>) = 0 [pid 6194] rt_sigprocmask(SIG_SETMASK, [], [pid 6192] <... futex resumed>) = 0 [pid 6189] creat("./bus", 000 [pid 6187] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6192] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6189] <... creat resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./61" [pid 6194] memfd_create("syzkaller", 0 [pid 6189] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6189] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6187] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(3, "", [pid 6187] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6189] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6187] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(3, [pid 6194] <... memfd_create resumed>) = 3 [pid 6184] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] <... rmdir resumed>) = 0 [ 130.944452][ T6188] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.983468][ T6188] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6184] <... futex resumed>) = 0 [pid 5069] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./62", 0777 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6194] <... mmap resumed>) = 0x7efd74b1c000 [pid 6193] munmap(0x7efd74b1c000, 138412032 [pid 6184] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] <... mkdir resumed>) = 0 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6184] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] <... munmap resumed>) = 0 [pid 6184] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6193] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6187] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [ 130.991371][ T6188] hfsplus: request for non-existent node 16715520 in B*Tree [ 130.995901][ T6189] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.001650][ T6188] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.022682][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6193] <... openat resumed>) = 4 [pid 6187] <... futex resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6195 attached [pid 6193] ioctl(4, LOOP_SET_FD, 3 [pid 6187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6184] <... clone3 resumed> => {parent_tid=[6195]}, 88) = 6195 [pid 5066] close(3 [pid 6187] <... mmap resumed>) = 0x7efd7cefb000 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], [pid 6187] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 6187] <... mprotect resumed>) = 0 [pid 6184] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6187] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6184] <... futex resumed>) = 0 [pid 6195] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6193] <... ioctl resumed>) = 0 [pid 6187] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6196 attached [pid 6195] <... rseq resumed>) = 0 [pid 6193] close(3 [pid 6187] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6184] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6196] set_robust_list(0x555555fbc6a0, 24 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6196 [pid 6196] <... set_robust_list resumed>) = 0 [pid 6187] <... clone3 resumed> => {parent_tid=[6197]}, 88) = 6197 [pid 6196] chdir("./62" [pid 6187] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6197 attached [pid 6196] <... chdir resumed>) = 0 [pid 6195] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6193] <... close resumed>) = 0 [pid 6187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6197] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6195] <... set_robust_list resumed>) = 0 [pid 6193] mkdir("./bus", 0777 [pid 6187] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... prctl resumed>) = 0 [pid 6187] <... futex resumed>) = 0 [pid 6196] setpgid(0, 0 [pid 6187] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6196] <... setpgid resumed>) = 0 [pid 6197] <... rseq resumed>) = 0 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] rt_sigprocmask(SIG_SETMASK, [], [pid 6193] <... mkdir resumed>) = 0 [pid 6188] <... write resumed>) = 57344 [pid 6197] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6196] <... openat resumed>) = 3 [ 131.039826][ T6188] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.048397][ T6193] loop3: detected capacity change from 0 to 1024 [ 131.059681][ T6188] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.067829][ T6189] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.082349][ T6189] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6193] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6197] <... set_robust_list resumed>) = 0 [pid 6196] write(3, "1000", 4 [pid 6188] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... write resumed>) = 4 [pid 6194] <... write resumed>) = 524288 [pid 6196] close(3) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 6194] munmap(0x7efd74b1c000, 138412032 [pid 6197] rt_sigprocmask(SIG_SETMASK, [], [pid 6196] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... munmap resumed>) = 0 [pid 6196] <... futex resumed>) = 0 [pid 6196] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6188] <... futex resumed>) = 0 [pid 6196] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6194] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6194] <... openat resumed>) = 4 [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6194] ioctl(4, LOOP_SET_FD, 3 [pid 6197] creat("./file1", 000 [pid 6196] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6195] creat("./file1", 000 [pid 6188] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6196] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6195] <... creat resumed>) = 5 [pid 6195] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6198 attached [pid 5069] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6198] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5069] newfstatat(AT_FDCWD, "./61/bus", [pid 6198] <... rseq resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6198] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6196] <... clone3 resumed> => {parent_tid=[6198]}, 88) = 6198 [pid 5069] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6195] <... futex resumed>) = 1 [pid 6184] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./61/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6195] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6184] exit_group(0 [pid 5069] <... openat resumed>) = 4 [pid 6196] rt_sigprocmask(SIG_SETMASK, [], [pid 6188] <... futex resumed>) = ? [pid 6184] <... exit_group resumed>) = ? [pid 5069] newfstatat(4, "", [pid 6198] <... set_robust_list resumed>) = 0 [pid 6196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6195] <... futex resumed>) = ? [pid 6194] <... ioctl resumed>) = 0 [pid 6188] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6198] rt_sigprocmask(SIG_SETMASK, [], [pid 6196] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] close(3 [pid 5069] getdents64(4, [pid 6198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6196] <... futex resumed>) = 0 [pid 6195] +++ exited with 0 +++ [pid 6193] <... mount resumed>) = 0 [pid 6187] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6184] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6198] memfd_create("syzkaller", 0 [pid 6196] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6194] <... close resumed>) = 0 [pid 5069] getdents64(4, [pid 6198] <... memfd_create resumed>) = 3 [pid 6194] mkdir("./bus", 0777 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6194] <... mkdir resumed>) = 0 [pid 5069] close(4 [pid 6198] <... mmap resumed>) = 0x7efd74b1c000 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./61/bus" [pid 6194] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... rmdir resumed>) = 0 [pid 6193] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6184, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6194] <... mount resumed>) = 0 [pid 6193] <... openat resumed>) = 3 [pid 6194] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6193] chdir("./bus" [pid 5069] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6194] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6194] chdir("./bus" [pid 6193] <... chdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./61/binderfs", [pid 5065] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6194] <... chdir resumed>) = 0 [pid 6193] ioctl(4, LOOP_CLR_FD [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 131.089770][ T6189] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.106310][ T6194] loop5: detected capacity change from 0 to 1024 [pid 6194] ioctl(4, LOOP_CLR_FD [pid 6193] <... ioctl resumed>) = 0 [pid 5069] unlink("./61/binderfs" [pid 5065] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6198] <... write resumed>) = 524288 [pid 6194] <... ioctl resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6193] close(4 [pid 5065] <... openat resumed>) = 3 [pid 6197] <... creat resumed>) = 5 [pid 6193] <... close resumed>) = 0 [pid 6194] close(4 [pid 5069] getdents64(3, [pid 6194] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6194] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 6194] <... futex resumed>) = 1 [pid 6192] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6194] creat("./bus", 000 [pid 6192] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./61" [pid 6194] <... creat resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 6194] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 5069] mkdir("./62", 0777 [pid 6194] <... futex resumed>) = 0 [pid 6192] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... mkdir resumed>) = 0 [pid 6192] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = 0 [pid 6192] <... futex resumed>) = 1 [pid 6194] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6192] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(3, "", [pid 6198] munmap(0x7efd74b1c000, 138412032 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6198] <... munmap resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6193] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 6197] <... futex resumed>) = 0 [pid 6193] creat("./bus", 000 [pid 6191] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6191] <... futex resumed>) = 0 [pid 6198] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6197] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] <... creat resumed>) = 4 [pid 6191] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] getdents64(3, [pid 6193] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 6193] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6199 ./strace-static-x86_64: Process 6199 attached [pid 6199] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6199] chdir("./62") = 0 [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6193] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6191] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6199] <... prctl resumed>) = 0 [pid 6198] <... ioctl resumed>) = 0 [pid 6199] setpgid(0, 0 [pid 6198] close(3 [pid 6199] <... setpgid resumed>) = 0 [pid 6198] <... close resumed>) = 0 [pid 6198] mkdir("./bus", 0777) = 0 [ 131.176243][ T6194] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.181647][ T6189] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.194719][ T6198] loop1: detected capacity change from 0 to 1024 [ 131.194894][ T6189] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.206634][ T6194] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6198] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6192] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6192] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6192] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6191] <... futex resumed>) = 0 [pid 6192] <... mprotect resumed>) = 0 [pid 6191] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6189] <... write resumed>) = 57344 [pid 6199] write(3, "1000", 4 [pid 6192] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6189] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6187] exit_group(0./strace-static-x86_64: Process 6200 attached [pid 6199] <... write resumed>) = 4 [pid 6187] <... exit_group resumed>) = ? [pid 6200] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6199] close(3 [pid 6197] <... futex resumed>) = ? [pid 6192] <... clone3 resumed> => {parent_tid=[6200]}, 88) = 6200 [pid 6200] <... rseq resumed>) = 0 [pid 6199] <... close resumed>) = 0 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], [pid 6200] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6199] symlink("/dev/binderfs", "./binderfs" [pid 6192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6200] <... set_robust_list resumed>) = 0 [pid 6199] <... symlink resumed>) = 0 [pid 6192] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] rt_sigprocmask(SIG_SETMASK, [], [pid 6199] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = 0 [pid 6197] +++ exited with 0 +++ [pid 6189] <... futex resumed>) = ? [pid 6198] <... mount resumed>) = 0 [pid 6200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6198] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6192] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] creat("./file1", 000 [pid 6199] <... futex resumed>) = 0 [pid 6198] <... openat resumed>) = 3 [pid 6199] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6199] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6199] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6199] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6198] chdir("./bus" [pid 6199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6198] <... chdir resumed>) = 0 [pid 6198] ioctl(4, LOOP_CLR_FD [pid 6199] <... clone3 resumed> => {parent_tid=[6201]}, 88) = 6201 [pid 6198] <... ioctl resumed>) = 0 [pid 6199] rt_sigprocmask(SIG_SETMASK, [], [pid 6198] close(4 [pid 6199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6198] <... close resumed>) = 0 [pid 6199] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 1 [pid 6199] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6201 attached [pid 6196] <... futex resumed>) = 0 [pid 6201] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6196] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... rseq resumed>) = 0 [pid 6198] <... futex resumed>) = 0 [pid 6196] <... futex resumed>) = 1 [pid 6201] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6198] creat("./bus", 000 [pid 6196] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... creat resumed>) = 4 [pid 6189] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5067] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] <... set_robust_list resumed>) = 0 [pid 6198] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6201] rt_sigprocmask(SIG_SETMASK, [], [pid 6198] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6198] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6196] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6201] memfd_create("syzkaller", 0 [pid 6196] <... futex resumed>) = 0 [pid 6201] <... memfd_create resumed>) = 3 [pid 6196] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 131.226480][ T6193] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.245880][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 131.251766][ T6194] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.259476][ T6194] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.261812][ T6193] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6201] <... mmap resumed>) = 0x7efd74b1c000 [pid 5067] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6191] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6192] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6191] <... mmap resumed>) = 0x7efd7cefb000 [pid 6191] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... umount2 resumed>) = 0 [pid 6191] <... mprotect resumed>) = 0 [pid 6191] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6200] <... creat resumed>) = 5 [pid 6191] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6200] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6191] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6196] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6202 attached [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6191] <... clone3 resumed> => {parent_tid=[6202]}, 88) = 6202 [pid 5065] newfstatat(AT_FDCWD, "./60/bus", [pid 6202] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6191] rt_sigprocmask(SIG_SETMASK, [], [pid 6202] <... rseq resumed>) = 0 [pid 6196] <... mmap resumed>) = 0x7efd7cefb000 [pid 6191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6196] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6196] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6202] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6196] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6191] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6202] <... set_robust_list resumed>) = 0 [pid 6196] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6191] <... futex resumed>) = 0 [pid 6202] rt_sigprocmask(SIG_SETMASK, [], [pid 6191] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6196] <... clone3 resumed> => {parent_tid=[6203]}, 88) = 6203 [ 131.296367][ T6198] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.307880][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 131.330707][ T6193] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.338760][ T6194] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6203 attached [pid 6202] creat("./file1", 000 [pid 6201] <... write resumed>) = 524288 [pid 6196] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] openat(AT_FDCWD, "./60/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6203] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] <... rseq resumed>) = 0 [pid 6196] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 4 [pid 6203] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6201] munmap(0x7efd74b1c000, 138412032 [pid 6196] <... futex resumed>) = 0 [pid 6203] <... set_robust_list resumed>) = 0 [pid 6203] rt_sigprocmask(SIG_SETMASK, [], [pid 6201] <... munmap resumed>) = 0 [pid 6196] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6203] creat("./file1", 000 [pid 6202] <... creat resumed>) = 5 [pid 6201] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] newfstatat(4, "", [pid 6201] <... openat resumed>) = 4 [pid 6201] ioctl(4, LOOP_SET_FD, 3 [pid 6202] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6202] <... futex resumed>) = 1 [pid 6191] <... futex resumed>) = 0 [pid 5067] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 6202] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5067] newfstatat(AT_FDCWD, "./60/bus", [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [ 131.367067][ T6198] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.381592][ T6194] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.381600][ T6193] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.384097][ T6193] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.392483][ T6201] loop4: detected capacity change from 0 to 1024 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] close(4 [pid 5067] umount2("./60/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./60/bus" [pid 5067] openat(AT_FDCWD, "./60/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 5065] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [pid 5065] newfstatat(AT_FDCWD, "./60/binderfs", [pid 6196] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6194] <... write resumed>) = 57344 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6194] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(4, [pid 5065] unlink("./60/binderfs" [pid 6194] <... futex resumed>) = 0 [pid 6194] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6192] exit_group(0 [pid 6200] <... futex resumed>) = ? [pid 6194] <... futex resumed>) = ? [pid 6192] <... exit_group resumed>) = ? [pid 6200] +++ exited with 0 +++ [pid 6194] +++ exited with 0 +++ [pid 6192] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6192, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6201] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5065] getdents64(3, [pid 6201] close(3 [pid 6203] <... creat resumed>) = 5 [pid 6201] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6203] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] rmdir("./60/bus" [pid 5065] close(3 [pid 6203] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] mkdir("./bus", 0777 [pid 5070] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6201] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6201] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./60" [pid 5070] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6201] <... mount resumed>) = 0 [pid 5070] newfstatat(3, "", [pid 5067] newfstatat(AT_FDCWD, "./60/binderfs", [pid 5065] <... rmdir resumed>) = 0 [pid 6201] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6201] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] mkdir("./61", 0777 [pid 6201] chdir("./bus" [pid 5070] getdents64(3, [pid 5067] unlink("./60/binderfs" [pid 6201] <... chdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] <... mkdir resumed>) = 0 [pid 6201] ioctl(4, LOOP_CLR_FD [pid 5070] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6201] <... ioctl resumed>) = 0 [pid 5067] getdents64(3, [pid 6201] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6201] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6201] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6199] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6199] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] close(3 [pid 6199] <... futex resumed>) = 0 [ 131.419708][ T6198] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.432184][ T6193] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.442181][ T6198] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6199] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] <... write resumed>) = 57344 [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 6201] creat("./bus", 000 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6201] <... creat resumed>) = 4 [pid 6193] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... close resumed>) = 0 [pid 6201] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6199] <... futex resumed>) = 0 [pid 6201] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6199] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] <... futex resumed>) = 0 [pid 5067] rmdir("./60"./strace-static-x86_64: Process 6204 attached [pid 6199] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6193] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6191] exit_group(0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6204 [pid 6204] set_robust_list(0x555555fbc6a0, 24 [pid 6202] <... futex resumed>) = ? [pid 6193] <... futex resumed>) = ? [pid 6191] <... exit_group resumed>) = ? [pid 5067] mkdir("./61", 0777 [pid 6202] +++ exited with 0 +++ [pid 6204] <... set_robust_list resumed>) = 0 [pid 6193] +++ exited with 0 +++ [pid 6191] +++ exited with 0 +++ [pid 5067] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6191, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5068] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6204] chdir("./61" [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 131.469433][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 131.486989][ T6198] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.502898][ T6201] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.510294][ T6201] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6204] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6204] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6204] setpgid(0, 0) = 0 [pid 6204] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6204] write(3, "1000", 4) = 4 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 6204] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6204] <... close resumed>) = 0 [pid 6204] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6205 [pid 6199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6199] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6199] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6205 attached [pid 6205] set_robust_list(0x555555fbc6a0, 24 [pid 6199] <... mprotect resumed>) = 0 [pid 6205] <... set_robust_list resumed>) = 0 [pid 6205] chdir("./61" [pid 6204] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6204] <... futex resumed>) = 0 [pid 6199] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6205] <... chdir resumed>) = 0 [pid 6204] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6199] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6204] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6204] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6199] <... clone3 resumed> => {parent_tid=[6206]}, 88) = 6206 [pid 6204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6199] rt_sigprocmask(SIG_SETMASK, [], [pid 6204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6199] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6204] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6199] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6206 attached [pid 6204] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6206] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6204] <... mprotect resumed>) = 0 [pid 6199] <... futex resumed>) = 0 [pid 6206] <... rseq resumed>) = 0 [pid 6204] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6199] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6206] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6204] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6206] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6204] <... clone3 resumed> => {parent_tid=[6207]}, 88) = 6207 [pid 6198] <... write resumed>) = 57344 ./strace-static-x86_64: Process 6207 attached [pid 6206] creat("./file1", 000 [pid 6205] <... prctl resumed>) = 0 [pid 6204] rt_sigprocmask(SIG_SETMASK, [], [pid 6198] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 6207] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6205] setpgid(0, 0 [pid 6198] <... futex resumed>) = 0 [pid 6207] <... rseq resumed>) = 0 [pid 6205] <... setpgid resumed>) = 0 [pid 6204] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 131.528841][ T6198] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.531436][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6198] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6207] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6204] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] exit_group(0 [pid 5070] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] <... set_robust_list resumed>) = 0 [pid 6204] <... futex resumed>) = 0 [pid 6203] <... futex resumed>) = ? [pid 6198] <... futex resumed>) = ? [pid 6196] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6204] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6203] +++ exited with 0 +++ [pid 6198] +++ exited with 0 +++ [pid 5070] newfstatat(AT_FDCWD, "./62/bus", [pid 6196] +++ exited with 0 +++ [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5070] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6207] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5070] openat(AT_FDCWD, "./62/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6205] write(3, "1000", 4 [pid 5070] <... openat resumed>) = 4 [pid 5070] newfstatat(4, "", [pid 6207] memfd_create("syzkaller", 0 [pid 6205] <... write resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6207] <... memfd_create resumed>) = 3 [pid 6205] close(3 [pid 5070] getdents64(4, [pid 5068] newfstatat(AT_FDCWD, "./62/bus", [pid 5066] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] <... close resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6205] symlink("/dev/binderfs", "./binderfs" [pid 5070] getdents64(4, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] <... symlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6205] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./62/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6207] <... mmap resumed>) = 0x7efd74b1c000 [pid 6205] <... futex resumed>) = 0 [pid 5070] rmdir("./62/bus" [pid 5068] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 6205] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] <... rmdir resumed>) = 0 [pid 5068] newfstatat(4, "", [pid 5066] newfstatat(3, "", [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6205] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6199] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6205] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] getdents64(4, [pid 5066] getdents64(3, [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(4, [pid 5066] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] unlink("./62/binderfs" [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6205] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] <... unlink resumed>) = 0 [ 131.579842][ T6201] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.614474][ T6201] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] close(4 [pid 6205] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] getdents64(3, [pid 6205] <... mprotect resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./62/bus" [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] rmdir("./62" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6208 attached [pid 5070] <... rmdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./62/binderfs", [pid 5070] mkdir("./63", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] unlink("./62/binderfs") = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] getdents64(3, [pid 6208] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6206] <... creat resumed>) = 5 [pid 6205] <... clone3 resumed> => {parent_tid=[6208]}, 88) = 6208 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6208] <... rseq resumed>) = 0 [pid 6206] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(3 [pid 6208] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6206] <... futex resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... close resumed>) = 0 [pid 6208] <... set_robust_list resumed>) = 0 [pid 6206] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5068] rmdir("./62" [pid 6208] rt_sigprocmask(SIG_SETMASK, [], [pid 6205] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] memfd_create("syzkaller", 0 [pid 6207] <... write resumed>) = 524288 [pid 6205] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... rmdir resumed>) = 0 [pid 6208] <... memfd_create resumed>) = 3 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6205] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] <... mmap resumed>) = 0x7efd74b1c000 [pid 6207] munmap(0x7efd74b1c000, 138412032 [pid 5070] close(3 [pid 5068] mkdir("./63", 0777 [pid 5070] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6207] <... munmap resumed>) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 6207] <... openat resumed>) = 4 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6209 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5068] close(3 [pid 6207] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6210 [ 131.629935][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 131.664541][ T6201] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6209 attached ./strace-static-x86_64: Process 6210 attached [pid 6210] set_robust_list(0x555555fbc6a0, 24 [pid 6209] set_robust_list(0x555555fbc6a0, 24 [pid 6208] <... write resumed>) = 524288 [pid 6207] <... ioctl resumed>) = 0 [pid 6210] <... set_robust_list resumed>) = 0 [pid 6210] chdir("./63") = 0 [pid 6210] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6210] setpgid(0, 0) = 0 [pid 6209] <... set_robust_list resumed>) = 0 [pid 6210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6209] chdir("./63" [pid 6208] munmap(0x7efd74b1c000, 138412032 [pid 6207] close(3 [pid 6209] <... chdir resumed>) = 0 [pid 6207] <... close resumed>) = 0 [pid 6207] mkdir("./bus", 0777 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6208] <... munmap resumed>) = 0 [pid 6210] write(3, "1000", 4 [pid 6207] <... mkdir resumed>) = 0 [pid 6210] <... write resumed>) = 4 [pid 6209] <... prctl resumed>) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6201] <... write resumed>) = 57344 [pid 6210] close(3) = 0 [pid 6201] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] symlink("/dev/binderfs", "./binderfs" [pid 6201] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 6210] <... symlink resumed>) = 0 [pid 6201] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] exit_group(0 [pid 6210] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] setpgid(0, 0 [pid 6208] <... openat resumed>) = 4 [pid 6207] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6206] <... futex resumed>) = ? [pid 6201] <... futex resumed>) = ? [pid 6199] <... exit_group resumed>) = ? [pid 5066] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... futex resumed>) = 0 [pid 6209] <... setpgid resumed>) = 0 [pid 6208] ioctl(4, LOOP_SET_FD, 3 [pid 6206] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 6199] +++ exited with 0 +++ [pid 6210] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6207] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6207] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] newfstatat(AT_FDCWD, "./62/bus", [pid 6210] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6207] <... openat resumed>) = 3 [pid 5069] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6207] chdir("./bus" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6207] <... chdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6207] ioctl(4, LOOP_CLR_FD [pid 5069] <... openat resumed>) = 3 [pid 6210] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6207] <... ioctl resumed>) = 0 [ 131.693454][ T6207] loop0: detected capacity change from 0 to 1024 [ 131.704136][ T6201] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] <... mprotect resumed>) = 0 [pid 6207] close(4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6209] <... openat resumed>) = 3 [pid 6207] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 6207] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6207] <... futex resumed>) = 1 [pid 6204] <... futex resumed>) = 0 [pid 5069] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6207] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6204] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6204] <... futex resumed>) = 0 [pid 6207] creat("./bus", 000 [pid 6204] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] <... creat resumed>) = 4 [pid 6207] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./62/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6207] <... futex resumed>) = 1 [pid 6204] <... futex resumed>) = 0 [pid 6210] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6207] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6204] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 6210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6209] write(3, "1000", 4 [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6204] <... futex resumed>) = 0 [pid 5066] newfstatat(4, "", ./strace-static-x86_64: Process 6211 attached [pid 6209] <... write resumed>) = 4 [pid 6207] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6204] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6211] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6210] <... clone3 resumed> => {parent_tid=[6211]}, 88) = 6211 [pid 6209] close(3 [pid 5066] getdents64(4, [pid 6211] <... rseq resumed>) = 0 [pid 6210] rt_sigprocmask(SIG_SETMASK, [], [pid 6209] <... close resumed>) = 0 [pid 6211] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6211] <... set_robust_list resumed>) = 0 [pid 6210] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... symlink resumed>) = 0 [pid 6208] <... ioctl resumed>) = 0 [pid 5066] getdents64(4, [pid 6211] rt_sigprocmask(SIG_SETMASK, [], [pid 6210] <... futex resumed>) = 0 [pid 6211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6210] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] close(3 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6209] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... close resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 6211] memfd_create("syzkaller", 0 [pid 5066] close(4 [pid 6211] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 6211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] rmdir("./62/bus" [pid 6211] <... mmap resumed>) = 0x7efd74b1c000 [pid 5066] <... rmdir resumed>) = 0 [pid 6211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6209] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6208] mkdir("./bus", 0777 [pid 5066] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.747234][ T6208] loop2: detected capacity change from 0 to 1024 [ 131.760732][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 5066] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6209] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6208] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6209] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6204] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] unlink("./62/binderfs" [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6204] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6209] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6204] <... futex resumed>) = 0 [pid 6209] <... mprotect resumed>) = 0 [pid 6204] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] getdents64(3, [pid 6211] <... write resumed>) = 524288 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6204] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] close(3 [pid 6204] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... close resumed>) = 0 [pid 6204] <... mprotect resumed>) = 0 [pid 5066] rmdir("./62" [pid 6209] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6204] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... rmdir resumed>) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6204] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] mkdir("./63", 0777 [pid 6209] <... clone3 resumed> => {parent_tid=[6212]}, 88) = 6212 [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 6204] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6212 attached [ 131.811450][ T6207] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.832544][ T6207] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.840223][ T6207] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6212] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6211] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6213 attached [pid 6212] <... rseq resumed>) = 0 [pid 6211] <... munmap resumed>) = 0 [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6208] <... mount resumed>) = 0 [pid 6204] <... clone3 resumed> => {parent_tid=[6213]}, 88) = 6213 [pid 5069] newfstatat(AT_FDCWD, "./62/bus", [pid 5066] <... openat resumed>) = 3 [pid 6213] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6212] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6211] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6209] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6204] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6213] <... rseq resumed>) = 0 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6211] <... openat resumed>) = 4 [pid 6204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6213] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6212] rt_sigprocmask(SIG_SETMASK, [], [pid 6211] ioctl(4, LOOP_SET_FD, 3 [pid 6204] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 6213] <... set_robust_list resumed>) = 0 [pid 6212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6211] <... ioctl resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 6208] <... openat resumed>) = 3 [pid 6204] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./62/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 6211] close(3 [pid 6204] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... openat resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6211] <... close resumed>) = 0 [pid 5069] newfstatat(4, "", ./strace-static-x86_64: Process 6214 attached [pid 6213] rt_sigprocmask(SIG_SETMASK, [], [pid 6212] memfd_create("syzkaller", 0 [pid 6211] mkdir("./bus", 0777 [pid 6209] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6208] chdir("./bus" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6214 [pid 6214] set_robust_list(0x555555fbc6a0, 24 [pid 6213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] <... memfd_create resumed>) = 3 [pid 6211] <... mkdir resumed>) = 0 [pid 6208] <... chdir resumed>) = 0 [pid 6207] <... write resumed>) = 57344 [pid 5069] getdents64(4, [pid 6213] creat("./file1", 000 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6208] ioctl(4, LOOP_CLR_FD [pid 6207] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6208] <... ioctl resumed>) = 0 [pid 5069] getdents64(4, [pid 6212] <... mmap resumed>) = 0x7efd74b1c000 [pid 6208] close(4 [pid 6207] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6208] <... close resumed>) = 0 [pid 6207] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] close(4 [pid 6213] <... creat resumed>) = 5 [pid 6211] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6208] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 6213] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... futex resumed>) = 1 [pid 6205] <... futex resumed>) = 0 [pid 5069] rmdir("./62/bus" [pid 6213] <... futex resumed>) = 1 [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6211] <... mount resumed>) = 0 [pid 6208] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6214] <... set_robust_list resumed>) = 0 [pid 6213] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] <... futex resumed>) = 0 [pid 6204] exit_group(0 [pid 5069] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6214] chdir("./63" [pid 6213] <... futex resumed>) = ? [pid 6211] <... openat resumed>) = 3 [pid 6208] creat("./bus", 000 [pid 6207] <... futex resumed>) = ? [pid 6205] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6214] <... chdir resumed>) = 0 [pid 6213] +++ exited with 0 +++ [pid 6211] chdir("./bus" [pid 6208] <... creat resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6211] <... chdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6214] <... prctl resumed>) = 0 [pid 6211] ioctl(4, LOOP_CLR_FD [pid 6208] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] +++ exited with 0 +++ [pid 6204] +++ exited with 0 +++ [pid 5069] unlink("./62/binderfs" [pid 6214] setpgid(0, 0 [pid 6211] <... ioctl resumed>) = 0 [pid 6208] <... futex resumed>) = 1 [pid 6205] <... futex resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6214] <... setpgid resumed>) = 0 [pid 6211] close(4 [pid 6208] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6205] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6211] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6204, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6205] <... futex resumed>) = 0 [pid 6211] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6211] <... futex resumed>) = 1 [pid 6210] <... futex resumed>) = 0 [pid 6211] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6210] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] <... futex resumed>) = 0 [pid 6214] <... openat resumed>) = 3 [ 131.869019][ T6207] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.880687][ T6207] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.893229][ T6211] loop3: detected capacity change from 0 to 1024 [ 131.902808][ T6207] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6211] creat("./bus", 000 [pid 6210] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6214] write(3, "1000", 4 [pid 6211] <... creat resumed>) = 4 [pid 5069] close(3 [pid 6214] <... write resumed>) = 4 [pid 6212] <... write resumed>) = 524288 [pid 6211] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6214] close(3 [pid 6212] munmap(0x7efd74b1c000, 138412032 [pid 6211] <... futex resumed>) = 1 [pid 6210] <... futex resumed>) = 0 [pid 5069] rmdir("./62" [pid 5065] newfstatat(3, "", [pid 6214] <... close resumed>) = 0 [pid 6211] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6210] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... rmdir resumed>) = 0 [pid 6214] symlink("/dev/binderfs", "./binderfs" [pid 6211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] <... futex resumed>) = 0 [pid 6214] <... symlink resumed>) = 0 [pid 6211] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6210] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] mkdir("./63", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 6212] <... munmap resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6214] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6214] <... futex resumed>) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... mkdir resumed>) = 0 [pid 6214] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6212] <... openat resumed>) = 4 [pid 6214] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6214] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6214] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] close(3 [pid 6214] <... mprotect resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6214] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6214] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6216]}, 88) = 6216 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6215 [pid 6205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6205] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x555555fbc6a0, 24 [pid 6214] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] <... set_robust_list resumed>) = 0 [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6215] chdir("./63" [pid 6214] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] <... futex resumed>) = 0 [pid 6214] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6215] <... chdir resumed>) = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] setpgid(0, 0) = 0 [ 131.963717][ T6208] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.980598][ T6211] hfsplus: request for non-existent node 16715520 in B*Tree [ 131.981402][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 131.994518][ T6212] loop5: detected capacity change from 0 to 1024 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6210] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6216 attached [pid 6215] <... openat resumed>) = 3 [pid 6212] <... ioctl resumed>) = 0 [pid 6215] write(3, "1000", 4 [pid 6210] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] <... write resumed>) = 4 [pid 6210] <... futex resumed>) = 0 [pid 6215] close(3 [pid 6210] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6215] <... close resumed>) = 0 [pid 6210] <... mmap resumed>) = 0x7efd7cefb000 [pid 6215] symlink("/dev/binderfs", "./binderfs" [pid 6210] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6215] <... symlink resumed>) = 0 [pid 6210] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6205] <... mmap resumed>) = 0x7efd7cefb000 [pid 6216] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6212] close(3 [pid 6205] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6212] <... close resumed>) = 0 [pid 6212] mkdir("./bus", 0777 [pid 6210] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6216] <... rseq resumed>) = 0 [pid 6205] <... mprotect resumed>) = 0 [pid 6210] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6212] <... mkdir resumed>) = 0 [pid 6205] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6216] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6210] <... clone3 resumed> => {parent_tid=[6217]}, 88) = 6217 [pid 6205] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6216] rt_sigprocmask(SIG_SETMASK, [], [pid 6210] rt_sigprocmask(SIG_SETMASK, [], [pid 6205] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6217 attached [pid 6216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6210] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6210] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... clone3 resumed> => {parent_tid=[6218]}, 88) = 6218 [pid 6216] memfd_create("syzkaller", 0 [pid 6217] <... rseq resumed>) = 0 [pid 6210] <... futex resumed>) = 0 [pid 6217] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6210] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6217] <... set_robust_list resumed>) = 0 [pid 6215] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... memfd_create resumed>) = 3 [pid 6205] rt_sigprocmask(SIG_SETMASK, [], [pid 6217] rt_sigprocmask(SIG_SETMASK, [], [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6216] <... mmap resumed>) = 0x7efd74b1c000 [pid 6205] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] creat("./file1", 000 [pid 6215] <... futex resumed>) = 0 [pid 6205] <... futex resumed>) = 0 [pid 6215] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6205] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6218 attached [pid 6215] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6215] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6215] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6217] <... creat resumed>) = 5 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6218] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [ 132.018516][ T6208] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.019707][ T6211] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.031676][ T6208] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6217] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6216] <... write resumed>) = 524288 [pid 6218] <... rseq resumed>) = 0 [pid 6217] <... futex resumed>) = 1 [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6210] <... futex resumed>) = 0 [pid 6217] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] <... clone3 resumed> => {parent_tid=[6219]}, 88) = 6219 ./strace-static-x86_64: Process 6219 attached [pid 6215] rt_sigprocmask(SIG_SETMASK, [], [pid 6219] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] <... rseq resumed>) = 0 [pid 6218] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6215] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = 0 [pid 6219] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6218] <... set_robust_list resumed>) = 0 [pid 6215] <... futex resumed>) = 0 [pid 6219] <... set_robust_list resumed>) = 0 [pid 6215] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6219] memfd_create("syzkaller", 0) = 3 [pid 6218] rt_sigprocmask(SIG_SETMASK, [], [pid 6216] munmap(0x7efd74b1c000, 138412032 [pid 6218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6218] creat("./file1", 000 [pid 6216] <... munmap resumed>) = 0 [pid 5065] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6216] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] newfstatat(AT_FDCWD, "./61/bus", [pid 6212] <... mount resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6216] <... openat resumed>) = 4 [pid 6212] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 6219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] <... mmap resumed>) = 0x7efd74b1c000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] openat(AT_FDCWD, "./61/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 6205] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6212] <... openat resumed>) = 3 [pid 6216] <... ioctl resumed>) = 0 [pid 6212] chdir("./bus" [pid 6216] close(3) = 0 [pid 6212] <... chdir resumed>) = 0 [pid 5065] getdents64(4, [pid 6216] mkdir("./bus", 0777 [pid 6212] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [ 132.061920][ T6211] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.085749][ T6211] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.094804][ T6208] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.105531][ T6216] loop1: detected capacity change from 0 to 1024 [pid 6216] <... mkdir resumed>) = 0 [pid 6212] close(4 [pid 5065] getdents64(4, [pid 6216] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6212] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6212] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] close(4 [pid 6212] <... futex resumed>) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6212] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] <... futex resumed>) = 0 [pid 6212] creat("./bus", 000 [pid 6209] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... creat resumed>) = 5 [pid 6212] <... creat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 6218] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./61/bus" [pid 6218] <... futex resumed>) = 0 [pid 6212] <... futex resumed>) = 1 [pid 6209] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6219] <... write resumed>) = 524288 [pid 6218] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] <... mount resumed>) = 0 [pid 6212] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] munmap(0x7efd74b1c000, 138412032 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] <... futex resumed>) = 0 [pid 6212] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6216] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6216] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6219] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6219] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6209] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 132.117490][ T6211] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.145585][ T6211] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.148474][ T6208] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6219] <... openat resumed>) = 4 [pid 5065] unlink("./61/binderfs" [pid 6219] ioctl(4, LOOP_SET_FD, 3 [pid 6216] chdir("./bus" [pid 6211] <... write resumed>) = 57344 [pid 5065] <... unlink resumed>) = 0 [pid 6216] <... chdir resumed>) = 0 [pid 6211] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6216] ioctl(4, LOOP_CLR_FD [pid 6211] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6216] <... ioctl resumed>) = 0 [pid 6211] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6210] exit_group(0 [pid 5065] close(3 [pid 6217] <... futex resumed>) = ? [pid 6216] close(4 [pid 6211] <... futex resumed>) = ? [pid 6210] <... exit_group resumed>) = ? [pid 5065] <... close resumed>) = 0 [pid 6217] +++ exited with 0 +++ [pid 6216] <... close resumed>) = 0 [pid 6211] +++ exited with 0 +++ [pid 6210] +++ exited with 0 +++ [pid 6216] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./61" [pid 6216] <... futex resumed>) = 1 [pid 5065] <... rmdir resumed>) = 0 [pid 6216] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] <... futex resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6210, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] mkdir("./62", 0777 [pid 6214] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 6216] <... futex resumed>) = 0 [pid 6214] <... futex resumed>) = 1 [pid 5065] <... mkdir resumed>) = 0 [pid 6216] creat("./bus", 000 [pid 6214] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... restart_syscall resumed>) = 0 [pid 6216] <... creat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6216] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 3 [pid 6216] <... futex resumed>) = 1 [pid 6214] <... futex resumed>) = 0 [pid 5068] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6216] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6214] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6219] <... ioctl resumed>) = 0 [pid 6214] <... futex resumed>) = 0 [pid 6219] close(3 [pid 6214] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(3 [pid 6219] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6219] mkdir("./bus", 0777 [pid 5068] newfstatat(3, "", [pid 5065] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] getdents64(3, [pid 6219] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 132.169280][ T6212] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.179468][ T6219] loop4: detected capacity change from 0 to 1024 [ 132.206257][ T6216] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6219] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6208] <... write resumed>) = 57344 [pid 6208] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6220 attached ) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6220 [pid 6220] set_robust_list(0x555555fbc6a0, 24 [pid 6208] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] <... set_robust_list resumed>) = 0 [pid 6220] chdir("./62") = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6220] setpgid(0, 0) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 [pid 6220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6209] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6205] exit_group(0 [pid 6220] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6220] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6209] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... futex resumed>) = ? [pid 6205] <... exit_group resumed>) = ? [pid 6218] <... futex resumed>) = ? [pid 6209] <... futex resumed>) = 0 [pid 6218] +++ exited with 0 +++ [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6209] <... mmap resumed>) = 0x7efd7cefb000 [pid 6214] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6214] <... futex resumed>) = 0 [pid 6208] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 6220] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6209] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6214] <... mmap resumed>) = 0x7efd7cefb000 [pid 6209] <... mprotect resumed>) = 0 [pid 6220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6214] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6220] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6214] <... mprotect resumed>) = 0 [pid 6209] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6220] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6214] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6209] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6220] <... mprotect resumed>) = 0 [pid 6214] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6209] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6220] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6221 attached [pid 6220] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6221] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6219] <... mount resumed>) = 0 [pid 6214] <... clone3 resumed> => {parent_tid=[6221]}, 88) = 6221 [pid 6209] <... clone3 resumed> => {parent_tid=[6222]}, 88) = 6222 [pid 5067] newfstatat(3, "", ./strace-static-x86_64: Process 6223 attached ./strace-static-x86_64: Process 6222 attached [pid 6221] <... rseq resumed>) = 0 [ 132.225734][ T6212] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.226293][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 132.233091][ T6208] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.248803][ T6216] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.261651][ T6212] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6219] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6214] rt_sigprocmask(SIG_SETMASK, [], [pid 6209] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6223] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6221] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6220] <... clone3 resumed> => {parent_tid=[6223]}, 88) = 6223 [pid 6223] <... rseq resumed>) = 0 [pid 6222] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6221] <... set_robust_list resumed>) = 0 [pid 6220] rt_sigprocmask(SIG_SETMASK, [], [pid 6219] <... openat resumed>) = 3 [pid 6214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] getdents64(3, [pid 6223] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6222] <... rseq resumed>) = 0 [pid 6221] rt_sigprocmask(SIG_SETMASK, [], [pid 6220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] chdir("./bus" [pid 6214] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... set_robust_list resumed>) = 0 [pid 6221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6220] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6223] rt_sigprocmask(SIG_SETMASK, [], [pid 6221] creat("./file1", 000 [pid 6220] <... futex resumed>) = 0 [pid 6214] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6222] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6220] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] <... chdir resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 6223] memfd_create("syzkaller", 0) = 3 [pid 6223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6222] <... set_robust_list resumed>) = 0 [pid 6219] ioctl(4, LOOP_CLR_FD [pid 6209] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] rt_sigprocmask(SIG_SETMASK, [], [pid 6219] <... ioctl resumed>) = 0 [pid 6222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6219] close(4 [pid 6222] creat("./file1", 000 [pid 6219] <... close resumed>) = 0 [pid 6223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6219] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] creat("./bus", 000 [pid 6215] <... futex resumed>) = 0 [pid 6219] <... creat resumed>) = 4 [pid 6215] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6223] <... write resumed>) = 524288 [pid 6219] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6219] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] <... futex resumed>) = 0 [ 132.286034][ T6216] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.296923][ T6212] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.308438][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 6215] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6222] <... creat resumed>) = 5 [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6215] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6222] <... futex resumed>) = 1 [pid 6209] <... futex resumed>) = 0 [pid 6222] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6223] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6221] <... creat resumed>) = 5 [pid 6223] <... openat resumed>) = 4 [pid 6221] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 132.338576][ T6216] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.358717][ T6212] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6223] ioctl(4, LOOP_SET_FD, 3 [pid 6221] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... umount2 resumed>) = 0 [pid 6215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] newfstatat(AT_FDCWD, "./63/bus", [pid 6215] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./63/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 6215] <... mprotect resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./61/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] newfstatat(4, "", [pid 5067] umount2("./61/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [ 132.387911][ T6219] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.393403][ T6223] loop0: detected capacity change from 0 to 1024 [ 132.402843][ T6212] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.411700][ T6216] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.422038][ T6219] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] openat(AT_FDCWD, "./61/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6223] <... ioctl resumed>) = 0 [pid 5068] getdents64(4, [pid 5067] <... openat resumed>) = 4 [pid 6215] <... clone3 resumed> => {parent_tid=[6224]}, 88) = 6224 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6224 attached [pid 6215] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] newfstatat(4, "", [pid 6224] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6223] close(3 [pid 6215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] getdents64(4, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6224] <... rseq resumed>) = 0 [pid 6223] <... close resumed>) = 0 [pid 6223] mkdir("./bus", 0777 [pid 5067] getdents64(4, [pid 6224] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6223] <... mkdir resumed>) = 0 [pid 6215] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6224] <... set_robust_list resumed>) = 0 [pid 6223] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6215] <... futex resumed>) = 0 [pid 6212] <... write resumed>) = 57344 [pid 5068] close(4 [pid 5067] getdents64(4, [pid 6224] rt_sigprocmask(SIG_SETMASK, [], [pid 6215] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6212] <... futex resumed>) = 0 [pid 6209] exit_group(0 [pid 5068] rmdir("./63/bus" [pid 5067] close(4 [pid 6224] creat("./file1", 000 [pid 6223] <... mount resumed>) = 0 [pid 6212] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... close resumed>) = 0 [pid 6223] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] rmdir("./61/bus" [pid 6223] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 6223] chdir("./bus" [pid 5067] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6223] <... chdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6223] ioctl(4, LOOP_CLR_FD [pid 5067] newfstatat(AT_FDCWD, "./61/binderfs", [pid 6223] <... ioctl resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6223] close(4 [pid 5067] unlink("./61/binderfs" [pid 6223] <... close resumed>) = 0 [pid 6222] <... futex resumed>) = ? [pid 6212] <... futex resumed>) = ? [pid 6209] <... exit_group resumed>) = ? [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6223] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] +++ exited with 0 +++ [pid 6216] <... write resumed>) = 57344 [pid 6212] +++ exited with 0 +++ [pid 5067] getdents64(3, [pid 6223] <... futex resumed>) = 1 [pid 6220] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6223] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 6223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6220] <... futex resumed>) = 0 [pid 6223] creat("./bus", 000 [pid 6220] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] exit_group(0 [pid 6223] <... creat resumed>) = 4 [pid 6221] <... futex resumed>) = ? [pid 6216] <... futex resumed>) = ? [pid 6214] <... exit_group resumed>) = ? [pid 5068] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 6223] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] +++ exited with 0 +++ [pid 6216] +++ exited with 0 +++ [pid 6214] +++ exited with 0 +++ [pid 6209] +++ exited with 0 +++ [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./61" [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5068] newfstatat(AT_FDCWD, "./63/binderfs", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6214, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6223] <... futex resumed>) = 1 [pid 6220] <... futex resumed>) = 0 [pid 5068] unlink("./63/binderfs" [pid 5067] <... rmdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5070] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6223] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6220] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5067] mkdir("./62", 0777 [pid 5066] <... restart_syscall resumed>) = 0 [pid 6220] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 6220] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] newfstatat(3, "", [pid 5068] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5070] getdents64(3, [pid 5068] rmdir("./63" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 132.441927][ T6216] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.461386][ T6219] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.477476][ T6219] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] close(3 [pid 5070] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6224] <... creat resumed>) = 5 [pid 5068] mkdir("./64", 0777 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 6224] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6225 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6224] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6225 attached [pid 6225] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6225] chdir("./62" [pid 5068] <... openat resumed>) = 3 [pid 6225] <... chdir resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6225] setpgid(0, 0) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] close(3 [pid 6225] <... openat resumed>) = 3 [pid 6220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... close resumed>) = 0 [pid 6220] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6225] write(3, "1000", 4 [pid 6220] <... futex resumed>) = 0 [pid 6225] <... write resumed>) = 4 [pid 6220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6225] close(3 [pid 6220] <... mmap resumed>) = 0x7efd7cefb000 [pid 6225] <... close resumed>) = 0 [pid 6220] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6225] symlink("/dev/binderfs", "./binderfs" [pid 6220] <... mprotect resumed>) = 0 [pid 6225] <... symlink resumed>) = 0 [pid 6220] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6225] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6227 [ 132.517026][ T6223] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.524777][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 132.538358][ T6219] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.560598][ T2846] hfsplus: b-tree write err: -5, ino 4 ./strace-static-x86_64: Process 6226 attached [pid 6225] <... futex resumed>) = 0 [pid 6220] <... clone3 resumed> => {parent_tid=[6226]}, 88) = 6226 [pid 6226] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6225] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6220] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6227 attached [pid 6226] <... rseq resumed>) = 0 [pid 6225] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6226] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6225] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6220] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] set_robust_list(0x555555fbc6a0, 24 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6226] rt_sigprocmask(SIG_SETMASK, [], [pid 6225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6227] <... set_robust_list resumed>) = 0 [pid 6220] <... futex resumed>) = 0 [pid 6227] chdir("./64" [pid 6226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6225] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6220] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6226] creat("./file1", 000 [pid 6225] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6227] <... chdir resumed>) = 0 [pid 6225] <... mprotect resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 6225] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6228]}, 88) = 6228 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6225] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6228 attached [pid 6227] setpgid(0, 0 [pid 6225] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6227] <... setpgid resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6225] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] newfstatat(AT_FDCWD, "./63/bus", [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6228] <... rseq resumed>) = 0 [pid 6225] <... futex resumed>) = 0 [pid 6228] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6225] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6228] <... set_robust_list resumed>) = 0 [pid 6227] <... openat resumed>) = 3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6227] write(3, "1000", 4) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 6227] close(3 [pid 5070] openat(AT_FDCWD, "./63/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] <... close resumed>) = 0 [pid 6228] rt_sigprocmask(SIG_SETMASK, [], [pid 6227] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... openat resumed>) = 4 [pid 6228] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6228] memfd_create("syzkaller", 0 [pid 6227] <... symlink resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 6227] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... memfd_create resumed>) = 3 [pid 6226] <... creat resumed>) = 5 [pid 6220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6219] <... write resumed>) = 57344 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 132.565964][ T6223] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.586326][ T6219] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.602549][ T6223] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.609905][ T6223] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6226] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... mmap resumed>) = 0x7efd74b1c000 [pid 6226] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6227] <... futex resumed>) = 0 [pid 6226] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5066] newfstatat(AT_FDCWD, "./63/bus", [pid 6227] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6215] exit_group(0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6215] <... exit_group resumed>) = ? [pid 6227] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6224] <... futex resumed>) = ? [pid 5066] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6224] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6219] <... futex resumed>) = ? [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] getdents64(4, [pid 5066] openat(AT_FDCWD, "./63/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6219] +++ exited with 0 +++ [pid 6215] +++ exited with 0 +++ [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6227] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] close(4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] newfstatat(4, "", [pid 6227] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, [pid 5070] rmdir("./63/bus" [pid 6227] <... mprotect resumed>) = 0 [pid 5069] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] <... rmdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6228] <... write resumed>) = 524288 [pid 6227] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5066] close(4 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6227] <... clone3 resumed> => {parent_tid=[6229]}, 88) = 6229 [pid 5066] rmdir("./63/bus"./strace-static-x86_64: Process 6229 attached [pid 6227] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] newfstatat(AT_FDCWD, "./63/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6228] munmap(0x7efd74b1c000, 138412032 [pid 5066] <... rmdir resumed>) = 0 [pid 6229] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6223] <... write resumed>) = 57344 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, [pid 5066] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] <... rseq resumed>) = 0 [pid 6227] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] unlink("./63/binderfs" [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6229] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6227] <... futex resumed>) = 0 [pid 6223] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6229] <... set_robust_list resumed>) = 0 [pid 6228] <... munmap resumed>) = 0 [pid 6227] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6223] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5069] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6229] rt_sigprocmask(SIG_SETMASK, [], [pid 6228] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6223] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] exit_group(0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6228] <... openat resumed>) = 4 [pid 6226] <... futex resumed>) = ? [pid 6223] <... futex resumed>) = ? [pid 6220] <... exit_group resumed>) = ? [pid 6226] +++ exited with 0 +++ [pid 6223] +++ exited with 0 +++ [pid 6220] +++ exited with 0 +++ [ 132.660540][ T6223] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.687824][ T6223] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] getdents64(3, [pid 5066] unlink("./63/binderfs" [pid 5065] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6229] memfd_create("syzkaller", 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6229] <... memfd_create resumed>) = 3 [pid 5070] close(3 [pid 5066] getdents64(3, [pid 5065] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5065] newfstatat(3, "", [pid 5066] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] rmdir("./63" [pid 5065] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5070] rmdir("./63" [pid 5066] mkdir("./64", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6228] <... ioctl resumed>) = 0 [pid 6229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6229] <... mmap resumed>) = 0x7efd74b1c000 [pid 6228] close(3) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 6228] mkdir("./bus", 0777 [pid 5066] <... close resumed>) = 0 [pid 6228] <... mkdir resumed>) = 0 [pid 5070] mkdir("./64", 0777 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6230 attached ) = -1 EINVAL (Invalid argument) [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6230 [pid 6228] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] newfstatat(AT_FDCWD, "./63/bus", [pid 6230] set_robust_list(0x555555fbc6a0, 24 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... set_robust_list resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 6230] chdir("./64" [pid 6229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./63/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6230] <... chdir resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6230] <... prctl resumed>) = 0 [pid 6230] setpgid(0, 0 [pid 6229] <... write resumed>) = 524288 [pid 5070] close(3 [pid 5069] <... openat resumed>) = 4 [pid 5070] <... close resumed>) = 0 [pid 6230] <... setpgid resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] newfstatat(4, "", [pid 6230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, [pid 6230] <... openat resumed>) = 3 [pid 6228] <... mount resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6231 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6230] write(3, "1000", 4) = 4 [pid 6230] close(3./strace-static-x86_64: Process 6231 attached ) = 0 [pid 6228] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] close(4 [pid 5065] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] symlink("/dev/binderfs", "./binderfs" [pid 6228] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 6231] set_robust_list(0x555555fbc6a0, 24 [pid 6228] chdir("./bus" [pid 5069] rmdir("./63/bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6231] <... set_robust_list resumed>) = 0 [pid 6230] <... symlink resumed>) = 0 [pid 6228] <... chdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./62/bus", [pid 6231] chdir("./64" [ 132.713736][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 132.719423][ T6228] loop2: detected capacity change from 0 to 1024 [ 132.735999][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6229] munmap(0x7efd74b1c000, 138412032 [pid 6228] ioctl(4, LOOP_CLR_FD [pid 5069] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6231] <... chdir resumed>) = 0 [pid 6230] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... munmap resumed>) = 0 [pid 6228] <... ioctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6229] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6228] close(4 [pid 5069] newfstatat(AT_FDCWD, "./63/binderfs", [pid 5065] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6230] <... futex resumed>) = 0 [pid 6229] <... openat resumed>) = 4 [pid 6228] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6231] <... prctl resumed>) = 0 [pid 6230] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6229] ioctl(4, LOOP_SET_FD, 3 [pid 6228] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] unlink("./63/binderfs" [pid 5065] openat(AT_FDCWD, "./62/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6231] setpgid(0, 0 [pid 6230] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6228] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6230] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6225] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6225] <... futex resumed>) = 0 [pid 6231] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6225] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(3 [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6230] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6228] creat("./bus", 000 [pid 5069] <... close resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 6230] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6228] <... creat resumed>) = 4 [pid 5069] rmdir("./63" [pid 6230] <... mprotect resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] mkdir("./64", 0777 [pid 5065] getdents64(4, [pid 6230] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6228] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6231] <... openat resumed>) = 3 [pid 6230] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6228] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(4, [pid 6231] write(3, "1000", 4 [pid 6230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6225] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6228] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6225] <... futex resumed>) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5065] close(4 [pid 6231] <... write resumed>) = 4 ./strace-static-x86_64: Process 6232 attached [pid 6230] <... clone3 resumed> => {parent_tid=[6232]}, 88) = 6232 [pid 6229] <... ioctl resumed>) = 0 [pid 6225] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6231] close(3) = 0 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(3 [pid 5065] <... close resumed>) = 0 [pid 6232] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6232] <... rseq resumed>) = 0 [pid 6232] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6230] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... set_robust_list resumed>) = 0 [pid 6231] <... symlink resumed>) = 0 [pid 6230] <... futex resumed>) = 0 [pid 6229] close(3 [pid 5069] <... close resumed>) = 0 [pid 5065] rmdir("./62/bus" [pid 6232] rt_sigprocmask(SIG_SETMASK, [], [pid 6230] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6229] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6231] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] mkdir("./bus", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 6229] <... mkdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6233 [pid 5065] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 132.809101][ T6229] loop3: detected capacity change from 0 to 1024 [ 132.840901][ T6228] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6229] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6233 attached [pid 6232] memfd_create("syzkaller", 0 [pid 6231] <... futex resumed>) = 0 [pid 6229] <... mount resumed>) = 0 [pid 6231] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6229] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6232] <... memfd_create resumed>) = 3 [pid 6231] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6229] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6229] chdir("./bus" [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6229] <... chdir resumed>) = 0 [pid 5065] unlink("./62/binderfs" [pid 6233] set_robust_list(0x555555fbc6a0, 24 [pid 6232] <... mmap resumed>) = 0x7efd74b1c000 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6229] ioctl(4, LOOP_CLR_FD [pid 6233] <... set_robust_list resumed>) = 0 [pid 6229] <... ioctl resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6233] chdir("./64" [pid 6229] close(4 [pid 5065] getdents64(3, [pid 6229] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 6229] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 6233] <... chdir resumed>) = 0 [pid 6229] <... futex resumed>) = 1 [pid 5065] rmdir("./62" [pid 6229] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6227] <... futex resumed>) = 0 [pid 6231] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6233] <... prctl resumed>) = 0 [pid 6233] setpgid(0, 0) = 0 [pid 6225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6225] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... openat resumed>) = 3 [pid 6231] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6227] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] <... futex resumed>) = 0 [pid 6225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6225] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6225] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6233] write(3, "1000", 4 [pid 6225] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6233] <... write resumed>) = 4 [pid 6225] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6234 attached [pid 6233] close(3 [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6231] <... mprotect resumed>) = 0 [pid 6229] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 1 [pid 5065] <... rmdir resumed>) = 0 [pid 6234] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6233] <... close resumed>) = 0 [pid 6231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6229] creat("./bus", 000 [pid 6227] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6225] <... clone3 resumed> => {parent_tid=[6234]}, 88) = 6234 [pid 6234] <... rseq resumed>) = 0 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6229] <... creat resumed>) = 4 [pid 5065] mkdir("./63", 0777 [pid 6234] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6233] <... symlink resumed>) = 0 [pid 6231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6229] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] rt_sigprocmask(SIG_SETMASK, [], [pid 6229] <... futex resumed>) = 1 [pid 6225] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6235 attached [pid 6234] <... set_robust_list resumed>) = 0 [pid 6229] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] <... futex resumed>) = 0 [pid 6225] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6234] rt_sigprocmask(SIG_SETMASK, [], [pid 6233] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... clone3 resumed> => {parent_tid=[6235]}, 88) = 6235 [pid 6227] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] <... futex resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6235] <... rseq resumed>) = 0 [pid 6234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6233] <... futex resumed>) = 0 [ 132.867106][ T6228] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.880877][ T6228] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.888312][ T6228] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6231] rt_sigprocmask(SIG_SETMASK, [], [pid 6229] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 1 [pid 6225] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6235] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6234] creat("./file1", 000 [pid 6233] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6229] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6227] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6235] <... set_robust_list resumed>) = 0 [pid 6232] <... write resumed>) = 524288 [pid 6231] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... write resumed>) = 57344 [pid 6235] rt_sigprocmask(SIG_SETMASK, [], [pid 6232] munmap(0x7efd74b1c000, 138412032 [pid 6231] <... futex resumed>) = 0 [pid 6228] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6231] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6235] memfd_create("syzkaller", 0 [pid 6232] <... munmap resumed>) = 0 [pid 6228] <... futex resumed>) = 0 [pid 6235] <... memfd_create resumed>) = 3 [pid 6228] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6235] <... mmap resumed>) = 0x7efd74b1c000 [pid 6232] <... openat resumed>) = 4 [pid 6235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6234] <... creat resumed>) = 5 [pid 6233] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6235] <... write resumed>) = 524288 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 6234] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6234] <... futex resumed>) = 1 [ 132.930790][ T6228] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.944754][ T6228] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.965996][ T6229] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.970406][ T6232] loop1: detected capacity change from 0 to 1024 [pid 6235] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6234] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6232] <... ioctl resumed>) = 0 [pid 6225] <... futex resumed>) = 0 [pid 5065] close(3 [pid 6235] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6232] close(3 [pid 6235] <... openat resumed>) = 4 [pid 6232] <... close resumed>) = 0 [pid 6232] mkdir("./bus", 0777 [pid 6235] ioctl(4, LOOP_SET_FD, 3 [pid 6232] <... mkdir resumed>) = 0 [pid 6233] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6227] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6225] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 6227] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] <... exit_group resumed>) = ? [pid 6234] <... futex resumed>) = ? [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6234] +++ exited with 0 +++ [pid 6233] <... mprotect resumed>) = 0 [pid 6227] <... futex resumed>) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6227] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6227] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6227] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6236 [pid 6227] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6237]}, 88) = 6237 [pid 6227] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6237 attached ./strace-static-x86_64: Process 6236 attached [pid 6233] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6228] <... futex resumed>) = ? [pid 6227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6237] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6236] set_robust_list(0x555555fbc6a0, 24 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6228] +++ exited with 0 +++ [pid 6227] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] +++ exited with 0 +++ [pid 6236] <... set_robust_list resumed>) = 0 [pid 6227] <... futex resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 6238 attached [pid 6237] <... rseq resumed>) = 0 [pid 6236] chdir("./63" [pid 6233] <... clone3 resumed> => {parent_tid=[6238]}, 88) = 6238 [pid 6232] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6227] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6237] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6236] <... chdir resumed>) = 0 [pid 6233] rt_sigprocmask(SIG_SETMASK, [], [pid 6238] <... rseq resumed>) = 0 [pid 6237] <... set_robust_list resumed>) = 0 [ 132.982304][ T6229] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.989986][ T6229] hfsplus: request for non-existent node 16715520 in B*Tree [ 132.997560][ T6229] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.002283][ T6235] loop5: detected capacity change from 0 to 1024 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6237] rt_sigprocmask(SIG_SETMASK, [], [pid 6236] <... prctl resumed>) = 0 [pid 6232] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6236] setpgid(0, 0 [pid 5067] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6236] <... setpgid resumed>) = 0 [pid 6232] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6232] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 6236] <... openat resumed>) = 3 [pid 6235] <... ioctl resumed>) = 0 [pid 6232] chdir("./bus" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6236] write(3, "1000", 4 [pid 6235] close(3 [pid 6232] <... chdir resumed>) = 0 [pid 5067] getdents64(3, [pid 6236] <... write resumed>) = 4 [pid 6235] <... close resumed>) = 0 [pid 6232] ioctl(4, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6236] close(3 [pid 6235] mkdir("./bus", 0777 [pid 6232] <... ioctl resumed>) = 0 [pid 5067] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6238] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6236] <... close resumed>) = 0 [pid 6233] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] close(4 [pid 6236] symlink("/dev/binderfs", "./binderfs" [pid 6235] <... mkdir resumed>) = 0 [pid 6232] <... close resumed>) = 0 [pid 6236] <... symlink resumed>) = 0 [pid 6232] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 1 [pid 6230] <... futex resumed>) = 0 [pid 6236] <... futex resumed>) = 0 [pid 6235] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6232] creat("./bus", 000 [pid 6230] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6230] <... futex resumed>) = 0 [pid 6236] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6230] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] <... set_robust_list resumed>) = 0 [pid 6237] creat("./file1", 000 [pid 6236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6233] <... futex resumed>) = 0 [pid 6232] <... creat resumed>) = 4 [pid 6238] rt_sigprocmask(SIG_SETMASK, [], [pid 6233] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6235] <... mount resumed>) = 0 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6238] memfd_create("syzkaller", 0 [pid 6235] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6235] chdir("./bus" [pid 6232] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... creat resumed>) = 5 [pid 6236] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6235] <... chdir resumed>) = 0 [pid 6232] <... futex resumed>) = 1 [pid 6230] <... futex resumed>) = 0 [pid 6229] <... write resumed>) = 57344 [pid 6238] <... memfd_create resumed>) = 3 [pid 6237] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6235] ioctl(4, LOOP_CLR_FD [pid 6232] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6230] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6237] <... futex resumed>) = 1 [pid 6236] <... mprotect resumed>) = 0 [ 133.032437][ T6229] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.040212][ T6229] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.048355][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6235] <... ioctl resumed>) = 0 [pid 6230] <... futex resumed>) = 0 [pid 6229] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 0 [pid 6238] <... mmap resumed>) = 0x7efd74b1c000 [pid 6237] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6227] exit_group(0) = ? [pid 6237] <... futex resumed>) = ? [pid 6236] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6237] +++ exited with 0 +++ [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6239]}, 88) = 6239 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6230] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6229] +++ exited with 0 +++ [pid 6227] +++ exited with 0 +++ [pid 6235] close(4 [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6236] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... close resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6235] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = 0 [pid 6236] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6235] <... futex resumed>) = 1 [pid 6231] <... futex resumed>) = 0 [pid 5068] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] creat("./bus", 000 [pid 6231] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6239 attached [pid 6235] <... creat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./62/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6239] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5067] umount2("./62/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6239] <... rseq resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./62/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6239] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5067] <... openat resumed>) = 4 [pid 6239] <... set_robust_list resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 6239] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] getdents64(4, [pid 6239] memfd_create("syzkaller", 0) = 3 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5067] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [ 133.073408][ T6232] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.080744][ T6232] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6235] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(4) = 0 [pid 5067] rmdir("./62/bus" [pid 6238] <... write resumed>) = 524288 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... futex resumed>) = 1 [pid 6231] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] munmap(0x7efd74b1c000, 138412032 [pid 6235] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(AT_FDCWD, "./62/binderfs", [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6238] <... munmap resumed>) = 0 [pid 6235] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6231] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] unlink("./62/binderfs") = 0 [pid 6238] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] getdents64(3, [pid 6230] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6238] <... openat resumed>) = 4 [pid 6230] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... close resumed>) = 0 [ 133.123245][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 133.160942][ T6232] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] rmdir("./62" [pid 6239] <... write resumed>) = 524288 [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 6230] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./64/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./64/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./64/bus") = 0 [pid 5068] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6239] munmap(0x7efd74b1c000, 138412032 [pid 6231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6230] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] unlink("./64/binderfs" [pid 6239] <... munmap resumed>) = 0 [pid 6231] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] <... mprotect resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6230] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] getdents64(3, [pid 6239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6230] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6231] <... mmap resumed>) = 0x7efd7cefb000 [pid 6230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] close(3 [pid 6231] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6230] <... clone3 resumed> => {parent_tid=[6240]}, 88) = 6240 [pid 5068] <... close resumed>) = 0 [pid 6231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6239] <... openat resumed>) = 4 [pid 6231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6230] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] rmdir("./64" [pid 5067] mkdir("./63", 0777 [pid 6239] ioctl(4, LOOP_SET_FD, 3 [pid 6231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6230] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6240 attached [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6231] <... clone3 resumed> => {parent_tid=[6241]}, 88) = 6241 [pid 6230] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] mkdir("./65", 0777 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6240] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 6241 attached [pid 6231] rt_sigprocmask(SIG_SETMASK, [], [pid 6240] <... rseq resumed>) = 0 [ 133.164528][ T6235] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.168344][ T6232] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.206398][ T6238] loop4: detected capacity change from 0 to 1024 [pid 6230] <... futex resumed>) = 0 [pid 6241] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6240] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6238] <... ioctl resumed>) = 0 [pid 6231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6241] <... rseq resumed>) = 0 [pid 6231] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6241] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6241] <... set_robust_list resumed>) = 0 [pid 6231] <... futex resumed>) = 0 [pid 6241] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6241] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6231] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6241] creat("./file1", 000 [pid 5068] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] close(3) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6242 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6243 [pid 6240] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6243 attached ./strace-static-x86_64: Process 6242 attached [pid 6239] <... ioctl resumed>) = 0 [pid 6243] set_robust_list(0x555555fbc6a0, 24 [pid 6242] set_robust_list(0x555555fbc6a0, 24 [pid 6239] close(3 [pid 6243] <... set_robust_list resumed>) = 0 [pid 6242] <... set_robust_list resumed>) = 0 [pid 6239] <... close resumed>) = 0 [pid 6243] chdir("./65" [pid 6242] chdir("./63" [pid 6239] mkdir("./bus", 0777 [pid 6243] <... chdir resumed>) = 0 [pid 6242] <... chdir resumed>) = 0 [pid 6239] <... mkdir resumed>) = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6239] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6243] <... prctl resumed>) = 0 [pid 6242] <... prctl resumed>) = 0 [pid 6240] rt_sigprocmask(SIG_SETMASK, [], [pid 6243] setpgid(0, 0 [pid 6242] setpgid(0, 0 [pid 6243] <... setpgid resumed>) = 0 [pid 6242] <... setpgid resumed>) = 0 [pid 6238] close(3 [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6243] write(3, "1000", 4) = 4 [pid 6243] close(3) = 0 [pid 6243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6243] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... openat resumed>) = 3 [pid 6243] <... futex resumed>) = 0 [pid 6242] write(3, "1000", 4 [pid 6238] <... close resumed>) = 0 [pid 6243] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6241] <... creat resumed>) = 5 [pid 6243] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6242] <... write resumed>) = 4 [pid 6241] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6241] <... futex resumed>) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6241] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6243] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6242] close(3) = 0 [pid 6243] <... clone3 resumed> => {parent_tid=[6244]}, 88) = 6244 [pid 6242] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6244 attached [pid 6243] rt_sigprocmask(SIG_SETMASK, [], [pid 6242] <... symlink resumed>) = 0 [ 133.218632][ T6239] loop0: detected capacity change from 0 to 1024 [ 133.231272][ T6235] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.241609][ T6235] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.251362][ T6235] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6244] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6239] <... mount resumed>) = 0 [pid 6230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6239] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6244] <... rseq resumed>) = 0 [pid 6243] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] creat("./file1", 000 [pid 6239] <... openat resumed>) = 3 [pid 6244] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6243] <... futex resumed>) = 0 [pid 6239] chdir("./bus" [pid 6244] <... set_robust_list resumed>) = 0 [pid 6243] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6239] <... chdir resumed>) = 0 [pid 6244] rt_sigprocmask(SIG_SETMASK, [], [pid 6239] ioctl(4, LOOP_CLR_FD [pid 6244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6242] <... futex resumed>) = 0 [pid 6239] <... ioctl resumed>) = 0 [pid 6244] memfd_create("syzkaller", 0 [pid 6242] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6239] close(4 [pid 6244] <... memfd_create resumed>) = 3 [pid 6242] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6239] <... close resumed>) = 0 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6242] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6239] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... mmap resumed>) = 0x7efd74b1c000 [pid 6239] <... futex resumed>) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6239] creat("./bus", 000 [pid 6236] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] <... creat resumed>) = 4 [pid 6236] <... futex resumed>) = 0 [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6236] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6239] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6239] <... futex resumed>) = 0 [pid 6236] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6239] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6236] <... futex resumed>) = 0 [pid 6238] mkdir("./bus", 0777 [pid 6236] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6238] <... mkdir resumed>) = 0 [pid 6242] <... mprotect resumed>) = 0 [pid 6238] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 133.276763][ T6232] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.292118][ T6235] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.299726][ T6235] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.313939][ T6232] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6245 attached => {parent_tid=[6245]}, 88) = 6245 [pid 6238] <... mount resumed>) = 0 [pid 6245] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6245] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6244] <... write resumed>) = 524288 [pid 6238] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6245] <... set_robust_list resumed>) = 0 [pid 6245] rt_sigprocmask(SIG_SETMASK, [], [pid 6238] <... openat resumed>) = 3 [pid 6245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6238] chdir("./bus" [pid 6235] <... write resumed>) = 57344 [pid 6245] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6242] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = 0 [pid 6242] <... futex resumed>) = 1 [pid 6245] memfd_create("syzkaller", 0 [pid 6242] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6245] <... memfd_create resumed>) = 3 [pid 6245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6238] <... chdir resumed>) = 0 [pid 6238] ioctl(4, LOOP_CLR_FD [pid 6235] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] <... ioctl resumed>) = 0 [pid 6235] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] exit_group(0 [pid 6244] munmap(0x7efd74b1c000, 138412032 [pid 6241] <... futex resumed>) = ? [pid 6240] <... creat resumed>) = 5 [pid 6238] close(4 [pid 6235] <... futex resumed>) = ? [pid 6231] <... exit_group resumed>) = ? [pid 6241] +++ exited with 0 +++ [pid 6240] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... close resumed>) = 0 [pid 6235] +++ exited with 0 +++ [pid 6232] <... write resumed>) = 57344 [pid 6231] +++ exited with 0 +++ [pid 6244] <... munmap resumed>) = 0 [pid 6240] <... futex resumed>) = 0 [pid 6238] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] exit_group(0 [pid 6245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6244] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6238] <... futex resumed>) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = ? [pid 6230] <... exit_group resumed>) = ? [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [ 133.328599][ T6239] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6245] <... write resumed>) = 524288 [pid 6244] <... openat resumed>) = 4 [pid 6240] +++ exited with 0 +++ [pid 6238] creat("./bus", 000 [pid 6236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6233] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] +++ exited with 0 +++ [pid 6230] +++ exited with 0 +++ [pid 5070] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6230, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6238] <... creat resumed>) = 4 [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6238] <... futex resumed>) = 0 [pid 6236] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6238] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6233] <... futex resumed>) = 0 [pid 6236] <... futex resumed>) = 0 [pid 6233] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] newfstatat(3, "", [pid 5066] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6236] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6236] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] getdents64(3, [pid 5066] newfstatat(3, "", [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 6236] <... mprotect resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6236] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6244] <... ioctl resumed>) = 0 [pid 6236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6245] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6245] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6246 attached [pid 6246] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6246] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6246] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6244] close(3) = 0 [ 133.371711][ T6239] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.379327][ T6239] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.394014][ T6244] loop3: detected capacity change from 0 to 1024 [ 133.394338][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 133.404551][ T6245] loop2: detected capacity change from 0 to 1024 [pid 6244] mkdir("./bus", 0777 [pid 6236] <... clone3 resumed> => {parent_tid=[6246]}, 88) = 6246 [pid 6245] <... ioctl resumed>) = 0 [pid 6244] <... mkdir resumed>) = 0 [pid 6245] close(3 [pid 6244] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6245] <... close resumed>) = 0 [pid 6245] mkdir("./bus", 0777 [pid 6236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6245] <... mkdir resumed>) = 0 [pid 6244] <... mount resumed>) = 0 [pid 6236] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... futex resumed>) = 0 [pid 6244] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6236] <... futex resumed>) = 1 [pid 6246] creat("./file1", 000 [pid 6244] <... openat resumed>) = 3 [pid 6244] chdir("./bus" [pid 6236] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] <... chdir resumed>) = 0 [pid 6245] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6244] ioctl(4, LOOP_CLR_FD) = 0 [pid 6244] close(4) = 0 [pid 6244] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6244] creat("./bus", 000 [pid 6243] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... creat resumed>) = 4 [pid 6243] <... futex resumed>) = 0 [pid 6243] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... mount resumed>) = 0 [pid 6244] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6244] <... futex resumed>) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6243] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... creat resumed>) = 5 [pid 6244] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6246] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6233] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... futex resumed>) = 0 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6233] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6245] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 6247 attached ) = 3 [pid 6233] <... clone3 resumed> => {parent_tid=[6247]}, 88) = 6247 [ 133.418810][ T6239] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.421941][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 133.452244][ T6238] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.464755][ T6238] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6247] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6245] chdir("./bus" [pid 6233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6233] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6233] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6247] <... rseq resumed>) = 0 [pid 6245] <... chdir resumed>) = 0 [pid 6247] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6245] ioctl(4, LOOP_CLR_FD [pid 6247] <... set_robust_list resumed>) = 0 [pid 6245] <... ioctl resumed>) = 0 [pid 6247] rt_sigprocmask(SIG_SETMASK, [], [pid 6245] close(4 [pid 6247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6245] <... close resumed>) = 0 [pid 6247] creat("./file1", 000 [pid 6245] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6242] <... futex resumed>) = 0 [pid 6245] creat("./bus", 000 [pid 6243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6242] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... creat resumed>) = 4 [pid 6243] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = 0 [pid 6245] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = 0 [pid 6242] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6245] <... futex resumed>) = 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] <... mmap resumed>) = 0x7efd7cefb000 [pid 6242] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6245] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6243] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6242] <... futex resumed>) = 0 [pid 6245] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6243] <... mprotect resumed>) = 0 [pid 6242] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = 0 [ 133.477342][ T6244] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.486399][ T6239] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.501400][ T6238] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6243] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 6243] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6248]}, 88) = 6248 [pid 6243] rt_sigprocmask(SIG_SETMASK, [], [pid 6233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./64/bus", [pid 6243] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6243] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6248 attached [pid 6248] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 5066] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5070] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6248] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] newfstatat(AT_FDCWD, "./64/bus", [pid 5066] openat(AT_FDCWD, "./64/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6248] creat("./file1", 000 [pid 5070] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(4, "", [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./64/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./64/bus" [pid 5066] getdents64(4, [pid 6239] <... write resumed>) = 57344 [pid 6239] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] exit_group(0 [pid 6242] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6239] <... futex resumed>) = ? [pid 6236] <... exit_group resumed>) = ? [pid 6242] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] +++ exited with 0 +++ [pid 6246] <... futex resumed>) = ? [pid 6242] <... futex resumed>) = 0 [pid 6246] +++ exited with 0 +++ [pid 6242] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6236] +++ exited with 0 +++ [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6242] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] getdents64(4, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6242] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6242] <... mprotect resumed>) = 0 [pid 6242] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] close(4 [pid 6242] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [ 133.524074][ T6245] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.531642][ T6239] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.534272][ T6238] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.540465][ T6244] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.563422][ T6245] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6242] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] rmdir("./64/bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6249 attached [pid 6248] <... creat resumed>) = 5 [pid 5070] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6248] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... clone3 resumed> => {parent_tid=[6249]}, 88) = 6249 [pid 5065] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6248] <... futex resumed>) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 6248] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5065] newfstatat(3, "", [pid 6242] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6249] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6242] <... futex resumed>) = 0 [pid 5070] unlink("./64/binderfs" [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6242] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... unlink resumed>) = 0 [pid 5070] getdents64(3, [pid 5065] getdents64(3, [pid 6249] <... rseq resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6249] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5070] close(3 [pid 5065] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] <... set_robust_list resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6249] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] rmdir("./64" [pid 6249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6249] creat("./file1", 000 [pid 5070] mkdir("./65", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... mkdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] unlink("./64/binderfs" [pid 6247] <... creat resumed>) = 5 [pid 5070] <... openat resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6247] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 6247] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6247] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] rmdir("./64") = 0 [pid 5066] mkdir("./65", 0777) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 3 [pid 5070] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5070] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6250 ./strace-static-x86_64: Process 6250 attached ./strace-static-x86_64: Process 6251 attached [pid 6250] set_robust_list(0x555555fbc6a0, 24 [pid 6251] set_robust_list(0x555555fbc6a0, 24 [pid 6250] <... set_robust_list resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6251 [ 133.592576][ T6244] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.592972][ T6245] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.599896][ T6244] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.621149][ T6238] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6251] <... set_robust_list resumed>) = 0 [pid 6250] chdir("./65" [pid 6251] chdir("./65" [pid 6250] <... chdir resumed>) = 0 [pid 6242] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6242] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 6251] <... chdir resumed>) = 0 [pid 6242] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6250] setpgid(0, 0) = 0 [pid 6251] <... prctl resumed>) = 0 [pid 6250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] setpgid(0, 0) = 0 [pid 6250] write(3, "1000", 4) = 4 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6250] close(3) = 0 [pid 6250] symlink("/dev/binderfs", "./binderfs" [pid 6251] <... openat resumed>) = 3 [pid 6250] <... symlink resumed>) = 0 [pid 6251] write(3, "1000", 4 [pid 6250] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... write resumed>) = 4 [ 133.640768][ T6244] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.649013][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 133.649170][ T6238] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.669143][ T6244] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6251] close(3) = 0 [pid 6250] <... futex resumed>) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs" [pid 6250] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6238] <... write resumed>) = 57344 [pid 6251] <... symlink resumed>) = 0 [pid 6250] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6238] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6238] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] exit_group(0 [pid 6251] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6251] <... futex resumed>) = 0 [pid 6250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6251] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6247] <... futex resumed>) = ? [pid 6238] <... futex resumed>) = ? [pid 6233] <... exit_group resumed>) = ? [pid 6251] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6250] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6247] +++ exited with 0 +++ [pid 6238] +++ exited with 0 +++ [pid 6251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6250] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6250] <... mprotect resumed>) = 0 [pid 6233] +++ exited with 0 +++ [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6250] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6251] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6250] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6244] <... write resumed>) = 57344 [pid 6251] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6244] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... mprotect resumed>) = 0 [pid 6244] <... futex resumed>) = 0 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6250] <... clone3 resumed> => {parent_tid=[6252]}, 88) = 6252 [pid 6244] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6250] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6252 attached [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6249] <... creat resumed>) = 5 [pid 6243] exit_group(0 [pid 5065] <... umount2 resumed>) = 0 [pid 6252] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6250] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = ? [pid 6244] <... futex resumed>) = ? [pid 6243] <... exit_group resumed>) = ? [pid 6252] <... rseq resumed>) = 0 [pid 6250] <... futex resumed>) = 0 [pid 6248] +++ exited with 0 +++ [pid 6244] +++ exited with 0 +++ [pid 6252] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6250] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6249] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6252] <... set_robust_list resumed>) = 0 [pid 6251] <... clone3 resumed> => {parent_tid=[6253]}, 88) = 6253 [pid 6249] <... futex resumed>) = 0 [pid 5069] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6252] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6252] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 133.691279][ T6245] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] newfstatat(AT_FDCWD, "./63/bus", [pid 6243] +++ exited with 0 +++ ./strace-static-x86_64: Process 6253 attached [pid 6252] memfd_create("syzkaller", 0 [pid 6251] rt_sigprocmask(SIG_SETMASK, [], [pid 6249] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6252] <... memfd_create resumed>) = 3 [pid 6251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6253] <... rseq resumed>) = 0 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6251] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6252] <... mmap resumed>) = 0x7efd74b1c000 [pid 6251] <... futex resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] <... set_robust_list resumed>) = 0 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6251] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6253] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 6253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./63/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6253] memfd_create("syzkaller", 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] getdents64(3, [pid 5065] <... openat resumed>) = 4 [pid 6253] <... memfd_create resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] <... mmap resumed>) = 0x7efd74b1c000 [pid 5068] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./63/bus") = 0 [pid 5065] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] <... write resumed>) = 524288 [pid 6252] <... write resumed>) = 524288 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./63/binderfs") = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./63") = 0 [pid 5065] mkdir("./64", 0777) = 0 [pid 6252] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6252] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6245] <... write resumed>) = 57344 [pid 6245] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... openat resumed>) = 4 [pid 6245] <... futex resumed>) = 0 [pid 6242] exit_group(0 [pid 6249] <... futex resumed>) = ? [pid 6242] <... exit_group resumed>) = ? [pid 6249] +++ exited with 0 +++ [ 133.736403][ T6245] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.767045][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 133.773078][ T6245] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6254 ./strace-static-x86_64: Process 6254 attached [pid 6254] set_robust_list(0x555555fbc6a0, 24 [pid 6253] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6254] <... set_robust_list resumed>) = 0 [pid 6245] +++ exited with 0 +++ [pid 6242] +++ exited with 0 +++ [pid 6254] chdir("./64" [pid 6253] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6242, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6254] <... chdir resumed>) = 0 [pid 6253] ioctl(4, LOOP_SET_FD, 3 [pid 6254] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6254] <... prctl resumed>) = 0 [pid 6254] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = 0 [pid 6254] <... setpgid resumed>) = 0 [pid 6254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6254] write(3, "1000", 4 [pid 6253] <... ioctl resumed>) = 0 [pid 6254] <... write resumed>) = 4 [pid 6254] close(3) = 0 [pid 6254] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6254] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] close(3 [pid 6254] <... futex resumed>) = 0 [pid 6253] <... close resumed>) = 0 [pid 6254] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6254] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6253] mkdir("./bus", 0777 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6253] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6254] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6254] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6252] <... ioctl resumed>) = 0 [pid 5068] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6252] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 6254] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6252] <... close resumed>) = 0 [pid 5069] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./65/bus", [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6252] mkdir("./bus", 0777 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6255 attached [pid 6253] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6252] <... mkdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./64/bus", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(3, [pid 6255] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6254] <... clone3 resumed> => {parent_tid=[6255]}, 88) = 6255 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6255] <... rseq resumed>) = 0 [pid 6254] rt_sigprocmask(SIG_SETMASK, [], [pid 6252] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6255] <... set_robust_list resumed>) = 0 [pid 6254] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [ 133.809158][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 133.810925][ T6252] loop1: detected capacity change from 0 to 1024 [ 133.832166][ T6253] loop5: detected capacity change from 0 to 1024 [pid 5069] openat(AT_FDCWD, "./64/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "./65/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6255] rt_sigprocmask(SIG_SETMASK, [], [pid 6254] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 4 [pid 5068] newfstatat(4, "", [pid 6255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6254] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6255] memfd_create("syzkaller", 0 [pid 5069] getdents64(4, [pid 5068] getdents64(4, [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./64/bus") = 0 [pid 6255] <... memfd_create resumed>) = 3 [pid 6255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5069] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] newfstatat(AT_FDCWD, "./64/binderfs", [pid 5068] getdents64(4, [pid 6255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 6253] <... mount resumed>) = 0 [pid 6252] <... mount resumed>) = 0 [pid 5069] unlink("./64/binderfs" [pid 5068] rmdir("./65/bus" [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6255] <... write resumed>) = 524288 [pid 6253] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6252] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6252] <... openat resumed>) = 3 [pid 5069] rmdir("./64" [pid 5068] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6253] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6253] chdir("./bus") = 0 [pid 6252] chdir("./bus" [pid 5069] mkdir("./65", 0777 [pid 6253] ioctl(4, LOOP_CLR_FD [pid 6252] <... chdir resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 6253] <... ioctl resumed>) = 0 [pid 6252] ioctl(4, LOOP_CLR_FD [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6253] close(4 [pid 6252] <... ioctl resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6253] <... close resumed>) = 0 [pid 6252] close(4 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6253] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... close resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6253] <... futex resumed>) = 1 [pid 6252] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 [pid 6253] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6252] <... futex resumed>) = 1 [pid 6251] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... futex resumed>) = 0 [pid 5069] close(3 [pid 6253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] <... futex resumed>) = 0 [pid 6250] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 6253] creat("./bus", 000 [pid 6252] creat("./bus", 000 [pid 6251] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] <... futex resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6253] <... creat resumed>) = 4 [pid 6252] <... creat resumed>) = 4 [pid 6250] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6253] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] unlink("./65/binderfs" [pid 6253] <... futex resumed>) = 1 [pid 6252] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6256 attached [pid 6253] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6252] <... futex resumed>) = 1 [pid 6251] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... futex resumed>) = 0 [pid 6256] set_robust_list(0x555555fbc6a0, 24 [pid 6253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] <... futex resumed>) = 0 [pid 6250] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6256 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6253] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6251] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] <... futex resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6256] chdir("./65" [pid 6252] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 133.903441][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6250] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] <... chdir resumed>) = 0 [pid 6255] munmap(0x7efd74b1c000, 138412032 [pid 5068] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 6256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] close(3 [pid 5067] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./65" [pid 6256] setpgid(0, 0 [pid 6255] <... munmap resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./63/bus", [pid 5068] mkdir("./66", 0777 [pid 6256] <... setpgid resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./63/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6255] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "./63/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6256] <... openat resumed>) = 3 [pid 6255] <... openat resumed>) = 4 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 4 [pid 5067] newfstatat(4, "", [pid 5068] close(3 [pid 6256] write(3, "1000", 4 [pid 6255] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6256] <... write resumed>) = 4 [pid 6255] <... ioctl resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 6256] close(3) = 0 [pid 6256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6256] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] getdents64(4, ./strace-static-x86_64: Process 6257 attached [pid 6251] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6257 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6251] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] close(4 [pid 6257] set_robust_list(0x555555fbc6a0, 24 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6250] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... mmap resumed>) = 0x7efd7cefb000 [pid 6250] <... futex resumed>) = 0 [pid 6257] <... set_robust_list resumed>) = 0 [pid 6256] <... futex resumed>) = 0 [pid 6255] close(3 [pid 6251] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... close resumed>) = 0 [pid 6257] chdir("./66" [pid 6256] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6255] <... close resumed>) = 0 [pid 6251] <... mprotect resumed>) = 0 [pid 6250] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] rmdir("./63/bus" [pid 6257] <... chdir resumed>) = 0 [pid 6256] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6255] mkdir("./bus", 0777 [pid 6251] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6250] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6256] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6255] <... mkdir resumed>) = 0 [pid 6251] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6250] <... mprotect resumed>) = 0 [ 133.964533][ T6253] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.977362][ T6252] hfsplus: request for non-existent node 16715520 in B*Tree [ 133.992712][ T6255] loop0: detected capacity change from 0 to 1024 [ 134.003043][ T6253] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] <... rmdir resumed>) = 0 [pid 6257] <... prctl resumed>) = 0 [pid 6256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6250] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6257] setpgid(0, 0 [pid 6256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6250] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6258 attached [pid 6257] <... setpgid resumed>) = 0 [pid 6256] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6255] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6251] <... clone3 resumed> => {parent_tid=[6258]}, 88) = 6258 [pid 6250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6258] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6256] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6251] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6259 attached [pid 6258] <... rseq resumed>) = 0 [pid 6257] <... openat resumed>) = 3 [pid 6256] <... mprotect resumed>) = 0 [pid 6251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6250] <... clone3 resumed> => {parent_tid=[6259]}, 88) = 6259 [pid 5067] newfstatat(AT_FDCWD, "./63/binderfs", [pid 6259] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6258] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6257] write(3, "1000", 4 [pid 6256] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6251] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] rt_sigprocmask(SIG_SETMASK, [], [pid 6258] <... set_robust_list resumed>) = 0 [pid 6257] <... write resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6258] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] close(3 [pid 6250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] unlink("./63/binderfs" [pid 6258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] <... close resumed>) = 0 [pid 6250] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... rseq resumed>) = 0 [pid 6258] creat("./file1", 000 [pid 6257] symlink("/dev/binderfs", "./binderfs" [pid 6256] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6251] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6259] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6251] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... set_robust_list resumed>) = 0 [pid 6257] <... symlink resumed>) = 0 [pid 5067] getdents64(3, ./strace-static-x86_64: Process 6260 attached [pid 6259] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... clone3 resumed> => {parent_tid=[6260]}, 88) = 6260 [pid 6255] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] close(3 [pid 6259] creat("./file1", 000 [pid 6255] <... openat resumed>) = 3 [ 134.017115][ T6252] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.037561][ T6253] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.052390][ T6252] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6260] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6257] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6255] chdir("./bus" [pid 5067] <... close resumed>) = 0 [pid 6260] <... rseq resumed>) = 0 [pid 6257] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6255] <... chdir resumed>) = 0 [pid 5067] rmdir("./63" [pid 6260] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6257] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6256] rt_sigprocmask(SIG_SETMASK, [], [pid 6255] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] <... set_robust_list resumed>) = 0 [pid 5067] mkdir("./64", 0777 [pid 6260] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6256] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6257] <... mprotect resumed>) = 0 [pid 6256] <... futex resumed>) = 0 [pid 6256] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6260] memfd_create("syzkaller", 0 [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6255] close(4 [pid 6260] <... memfd_create resumed>) = 3 [pid 6257] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6255] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6255] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6261 attached [pid 6260] <... mmap resumed>) = 0x7efd74b1c000 [pid 6255] <... futex resumed>) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6261] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6257] <... clone3 resumed> => {parent_tid=[6261]}, 88) = 6261 [pid 6255] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6261] <... rseq resumed>) = 0 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6261] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6259] <... creat resumed>) = 5 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... openat resumed>) = 3 [pid 6259] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... set_robust_list resumed>) = 0 [pid 6260] <... write resumed>) = 524288 [pid 6259] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6254] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6259] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6255] <... futex resumed>) = 0 [pid 6254] <... futex resumed>) = 1 [pid 6261] rt_sigprocmask(SIG_SETMASK, [], [pid 6255] creat("./bus", 000 [pid 6254] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] munmap(0x7efd74b1c000, 138412032 [pid 6255] <... creat resumed>) = 4 [pid 5067] close(3) = 0 [pid 6261] memfd_create("syzkaller", 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6255] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] <... futex resumed>) = 0 [pid 6254] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 134.068075][ T6252] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.085659][ T6253] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6254] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6262 attached [pid 6261] <... memfd_create resumed>) = 3 [pid 6260] <... munmap resumed>) = 0 [pid 6255] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6262 [pid 6262] set_robust_list(0x555555fbc6a0, 24 [pid 6260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6261] <... mmap resumed>) = 0x7efd74b1c000 [pid 6262] <... set_robust_list resumed>) = 0 [pid 6261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6260] <... openat resumed>) = 4 [pid 6262] chdir("./64") = 0 [pid 6262] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6258] <... creat resumed>) = 5 [pid 6262] <... prctl resumed>) = 0 [pid 6262] setpgid(0, 0 [pid 6258] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6262] <... setpgid resumed>) = 0 [pid 6258] <... futex resumed>) = 0 [pid 6262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6261] <... write resumed>) = 524288 [pid 6258] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 134.114230][ T6252] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.135903][ T6255] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.148021][ T6260] loop4: detected capacity change from 0 to 1024 [ 134.149008][ T6252] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6262] <... openat resumed>) = 3 [pid 6260] <... ioctl resumed>) = 0 [pid 6254] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6262] write(3, "1000", 4) = 4 [pid 6260] close(3 [pid 6262] close(3 [pid 6260] <... close resumed>) = 0 [pid 6254] <... futex resumed>) = 0 [pid 6254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6262] <... close resumed>) = 0 [pid 6260] mkdir("./bus", 0777 [pid 6262] symlink("/dev/binderfs", "./binderfs" [pid 6254] <... mmap resumed>) = 0x7efd7cefb000 [pid 6260] <... mkdir resumed>) = 0 [pid 6254] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6262] <... symlink resumed>) = 0 [pid 6261] munmap(0x7efd74b1c000, 138412032 [pid 6260] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6254] <... mprotect resumed>) = 0 [pid 6262] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6262] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6262] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6254] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6261] <... munmap resumed>) = 0 [pid 6254] <... rt_sigprocmask resumed>[], 8) = 0 [ 134.165575][ T6253] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6254] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6262] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6262] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6254] <... clone3 resumed> => {parent_tid=[6263]}, 88) = 6263 [pid 6262] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6263 attached [pid 6262] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6254] rt_sigprocmask(SIG_SETMASK, [], [pid 6263] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6262] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6261] <... openat resumed>) = 4 [pid 6254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6263] <... rseq resumed>) = 0 [pid 6262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6261] ioctl(4, LOOP_SET_FD, 3 [pid 6254] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6263] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6262] <... clone3 resumed> => {parent_tid=[6264]}, 88) = 6264 [pid 6263] <... set_robust_list resumed>) = 0 [pid 6263] rt_sigprocmask(SIG_SETMASK, [], [pid 6262] rt_sigprocmask(SIG_SETMASK, [], [pid 6263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6263] creat("./file1", 000 [pid 6262] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... write resumed>) = 57344 [pid 6252] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6262] <... futex resumed>) = 0 [pid 6250] exit_group(0 [pid 6259] <... futex resumed>) = ? [pid 6252] <... futex resumed>) = ? [pid 6250] <... exit_group resumed>) = ? [pid 6262] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6259] +++ exited with 0 +++ [pid 6252] +++ exited with 0 +++ [pid 6250] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6250, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 6264 attached [pid 6253] <... write resumed>) = 57344 [pid 5066] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6264] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6260] <... mount resumed>) = 0 [pid 6253] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] <... rseq resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6264] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5066] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6264] <... set_robust_list resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6264] rt_sigprocmask(SIG_SETMASK, [], [pid 6253] <... futex resumed>) = 0 [pid 6251] exit_group(0 [pid 6264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6258] <... futex resumed>) = ? [pid 6251] <... exit_group resumed>) = ? [pid 6264] memfd_create("syzkaller", 0 [pid 6258] +++ exited with 0 +++ [pid 6253] +++ exited with 0 +++ [pid 6251] +++ exited with 0 +++ [pid 6264] <... memfd_create resumed>) = 3 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] newfstatat(3, "", [pid 6264] <... mmap resumed>) = 0x7efd74b1c000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6260] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6260] <... openat resumed>) = 3 [pid 6261] <... ioctl resumed>) = 0 [ 134.191251][ T6255] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.198865][ T6255] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.211951][ T6253] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.220863][ T6261] loop3: detected capacity change from 0 to 1024 [pid 5070] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6261] close(3 [pid 6260] chdir("./bus" [pid 5070] <... openat resumed>) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6260] <... chdir resumed>) = 0 [pid 6261] <... close resumed>) = 0 [pid 6260] ioctl(4, LOOP_CLR_FD [pid 5070] getdents64(3, [pid 6261] mkdir("./bus", 0777 [pid 6260] <... ioctl resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6261] <... mkdir resumed>) = 0 [pid 6260] close(4 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6261] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6260] <... close resumed>) = 0 [pid 6260] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... mount resumed>) = 0 [pid 6260] <... futex resumed>) = 1 [pid 6256] <... futex resumed>) = 0 [pid 6254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6261] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6260] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6256] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6256] <... futex resumed>) = 0 [pid 6261] <... openat resumed>) = 3 [pid 6260] creat("./bus", 000 [pid 6256] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] chdir("./bus" [pid 6264] <... write resumed>) = 524288 [pid 6261] <... chdir resumed>) = 0 [pid 6260] <... creat resumed>) = 4 [pid 6261] ioctl(4, LOOP_CLR_FD [pid 6260] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... ioctl resumed>) = 0 [pid 6260] <... futex resumed>) = 1 [pid 6256] <... futex resumed>) = 0 [pid 6256] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] close(4 [ 134.253150][ T6255] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.267871][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 134.274575][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6260] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6263] <... creat resumed>) = 5 [pid 6261] <... close resumed>) = 0 [pid 6261] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] creat("./bus", 000 [pid 6257] <... futex resumed>) = 0 [pid 6261] <... creat resumed>) = 4 [pid 6263] <... futex resumed>) = 0 [pid 6257] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] munmap(0x7efd74b1c000, 138412032 [pid 6263] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] <... munmap resumed>) = 0 [pid 6264] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6261] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... umount2 resumed>) = 0 [pid 6256] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6264] ioctl(4, LOOP_SET_FD, 3 [pid 6256] <... mmap resumed>) = 0x7efd7cefb000 [ 134.299371][ T6255] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.313776][ T6255] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.326668][ T6260] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.345093][ T6260] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] newfstatat(AT_FDCWD, "./65/bus", [pid 6261] <... futex resumed>) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6256] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6257] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6257] <... futex resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6257] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] <... mprotect resumed>) = 0 [pid 6255] <... write resumed>) = 57344 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6255] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 6255] <... futex resumed>) = 0 [pid 6254] exit_group(0 [pid 5070] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6254] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./65/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6263] <... futex resumed>) = ? [pid 6255] +++ exited with 0 +++ [pid 5070] newfstatat(AT_FDCWD, "./65/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6264] <... ioctl resumed>) = 0 [pid 5070] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./65/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] newfstatat(4, "", [pid 6264] close(3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6264] <... close resumed>) = 0 [pid 6264] mkdir("./bus", 0777 [pid 6263] +++ exited with 0 +++ [pid 6254] +++ exited with 0 +++ [pid 5066] <... openat resumed>) = 4 [pid 6256] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6254, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5066] newfstatat(4, "", [pid 6264] <... mkdir resumed>) = 0 [pid 5070] getdents64(4, [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [ 134.356625][ T6264] loop2: detected capacity change from 0 to 1024 [ 134.357443][ T6260] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.378616][ T6261] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.399619][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6264] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] getdents64(4, [pid 6256] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./65/bus") = 0 [pid 6256] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./65/binderfs") = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 6256] <... clone3 resumed> => {parent_tid=[6265]}, 88) = 6265 [pid 5066] getdents64(4, ./strace-static-x86_64: Process 6265 attached [pid 6256] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] rmdir("./65" [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6256] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] close(4 [pid 6265] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6257] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6256] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] mkdir("./66", 0777 [pid 5066] rmdir("./65/bus" [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6265] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6265] rt_sigprocmask(SIG_SETMASK, [], [pid 6257] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6257] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6257] <... mprotect resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6265] creat("./file1", 000 [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6257] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6264] <... mount resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6264] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6264] chdir("./bus") = 0 [pid 6264] ioctl(4, LOOP_CLR_FD) = 0 [pid 6264] close(4) = 0 [ 134.401165][ T6260] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.423941][ T6261] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6257] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./65/binderfs"./strace-static-x86_64: Process 6267 attached ./strace-static-x86_64: Process 6266 attached [pid 6265] <... creat resumed>) = 5 [pid 6264] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6266 [pid 6266] set_robust_list(0x555555fbc6a0, 24 [pid 6265] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] <... futex resumed>) = 1 [pid 6262] <... futex resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6257] <... clone3 resumed> => {parent_tid=[6267]}, 88) = 6267 [pid 6267] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6265] <... futex resumed>) = 1 [pid 6264] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6262] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] rt_sigprocmask(SIG_SETMASK, [], [pid 6256] <... futex resumed>) = 0 [pid 5066] getdents64(3, [pid 6267] <... rseq resumed>) = 0 [pid 6264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6262] <... futex resumed>) = 0 [pid 6257] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6267] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6266] <... set_robust_list resumed>) = 0 [pid 6265] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] creat("./bus", 000 [pid 6262] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6257] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = 0 [pid 6267] <... set_robust_list resumed>) = 0 [pid 6266] chdir("./66" [pid 6264] <... creat resumed>) = 4 [pid 6257] <... futex resumed>) = 0 [pid 5066] close(3 [pid 6266] <... chdir resumed>) = 0 [pid 6266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6266] setpgid(0, 0) = 0 [pid 6266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6264] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6262] <... futex resumed>) = 0 [pid 6262] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6262] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6264] <... futex resumed>) = 1 [pid 6264] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] <... close resumed>) = 0 [pid 6257] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] rt_sigprocmask(SIG_SETMASK, [], [pid 6266] write(3, "1000", 4 [pid 6267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6267] creat("./file1", 000 [pid 6266] <... write resumed>) = 4 [pid 6266] close(3) = 0 [ 134.453090][ T6261] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.464605][ T6261] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.481250][ T6260] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6266] symlink("/dev/binderfs", "./binderfs" [pid 6267] <... creat resumed>) = 5 [pid 5066] rmdir("./65" [pid 5065] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6267] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6267] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6266] <... symlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./64/bus", [pid 5066] mkdir("./66", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./64/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6266] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 4 [pid 6266] <... futex resumed>) = 0 [pid 6266] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] newfstatat(4, "", [pid 6266] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6266] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] rmdir("./64/bus" [pid 6266] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] <... rmdir resumed>) = 0 [pid 6266] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5065] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] <... clone3 resumed> => {parent_tid=[6268]}, 88) = 6268 [pid 5065] newfstatat(AT_FDCWD, "./64/binderfs", ./strace-static-x86_64: Process 6268 attached [pid 6266] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6268] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6268] <... rseq resumed>) = 0 [pid 6266] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6266] <... futex resumed>) = 0 [pid 5065] unlink("./64/binderfs" [pid 6268] <... set_robust_list resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 6268] rt_sigprocmask(SIG_SETMASK, [], [pid 6262] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... unlink resumed>) = 0 [pid 6268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6266] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6262] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6268] memfd_create("syzkaller", 0 [pid 6262] <... futex resumed>) = 0 [pid 6268] <... memfd_create resumed>) = 3 [pid 6262] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6262] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6262] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6262] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6269 attached ) = 0x7efd74b1c000 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6269] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6260] <... write resumed>) = 57344 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] close(3 [pid 6269] <... rseq resumed>) = 0 [pid 6269] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6260] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 6269] <... set_robust_list resumed>) = 0 [pid 6260] <... futex resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./64" [pid 6269] rt_sigprocmask(SIG_SETMASK, [], [pid 6262] <... clone3 resumed> => {parent_tid=[6269]}, 88) = 6269 [pid 6260] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... rmdir resumed>) = 0 [pid 6269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6262] rt_sigprocmask(SIG_SETMASK, [], [pid 6256] exit_group(0 [pid 5066] close(3 [ 134.499364][ T6260] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.503026][ T6264] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.520774][ T6261] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.528965][ T6264] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.535425][ T6261] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6269] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6265] <... futex resumed>) = ? [pid 6262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6260] <... futex resumed>) = ? [pid 6256] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 5065] mkdir("./65", 0777 [pid 6268] <... write resumed>) = 524288 [pid 6265] +++ exited with 0 +++ [pid 6262] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] +++ exited with 0 +++ [pid 5065] <... mkdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6270 attached [pid 6269] <... futex resumed>) = 0 [pid 6262] <... futex resumed>) = 1 [pid 6256] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6270 [pid 6270] set_robust_list(0x555555fbc6a0, 24 [pid 5065] <... openat resumed>) = 3 [pid 6269] creat("./file1", 000 [pid 6262] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6270] <... set_robust_list resumed>) = 0 [pid 6270] chdir("./66" [pid 6261] <... write resumed>) = 57344 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6256, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 6270] <... chdir resumed>) = 0 [pid 6261] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6261] <... futex resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5069] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6270] <... prctl resumed>) = 0 [pid 6261] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6257] exit_group(0 [pid 6270] setpgid(0, 0 [pid 6267] <... futex resumed>) = ? [pid 6261] <... futex resumed>) = ? [pid 6257] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6271 attached [pid 6268] munmap(0x7efd74b1c000, 138412032 [pid 6261] +++ exited with 0 +++ [pid 6271] set_robust_list(0x555555fbc6a0, 24 [pid 6270] <... setpgid resumed>) = 0 [pid 5069] newfstatat(3, "", [pid 6271] <... set_robust_list resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6271 [pid 6271] chdir("./65" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6271] <... chdir resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6268] <... munmap resumed>) = 0 [pid 5069] getdents64(3, [pid 6271] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6268] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6271] <... prctl resumed>) = 0 [pid 6268] <... openat resumed>) = 4 [pid 5069] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] setpgid(0, 0 [pid 6268] ioctl(4, LOOP_SET_FD, 3 [pid 6267] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ [pid 6270] <... openat resumed>) = 3 [pid 6271] <... setpgid resumed>) = 0 [pid 6270] write(3, "1000", 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6270] <... write resumed>) = 4 [pid 6270] close(3) = 0 [pid 6270] symlink("/dev/binderfs", "./binderfs" [pid 5068] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6269] <... creat resumed>) = 5 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6270] <... symlink resumed>) = 0 [pid 6269] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6270] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6270] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6269] <... futex resumed>) = 1 [pid 6262] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6270] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6269] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6268] <... ioctl resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 6271] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6271] write(3, "1000", 4 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6271] <... write resumed>) = 4 [pid 5068] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6271] close(3) = 0 [pid 6271] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6271] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6271] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6270] <... mmap resumed>) = 0x7efd7cf1c000 [ 134.570493][ T6264] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.593287][ T6264] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.605561][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 134.612417][ T6268] loop5: detected capacity change from 0 to 1024 [pid 6271] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6270] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6271] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6268] close(3 [pid 6271] <... mprotect resumed>) = 0 [pid 6270] <... mprotect resumed>) = 0 [pid 6268] <... close resumed>) = 0 [pid 6271] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6270] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6268] mkdir("./bus", 0777 [pid 6271] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6270] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6272 attached [pid 6270] <... clone3 resumed> => {parent_tid=[6272]}, 88) = 6272 [pid 6271] <... clone3 resumed> => {parent_tid=[6273]}, 88) = 6273 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], [pid 6272] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6270] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6272] <... rseq resumed>) = 0 [pid 6272] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6270] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... set_robust_list resumed>) = 0 [pid 6271] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6272] rt_sigprocmask(SIG_SETMASK, [], [pid 6270] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6272] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6271] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6273 attached ) = 0 [pid 6272] memfd_create("syzkaller", 0 [pid 6273] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6271] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6273] <... rseq resumed>) = 0 [pid 6268] <... mkdir resumed>) = 0 [pid 6273] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6272] <... memfd_create resumed>) = 3 [pid 6273] <... set_robust_list resumed>) = 0 [pid 6273] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6273] memfd_create("syzkaller", 0) = 3 [pid 6272] <... mmap resumed>) = 0x7efd74b1c000 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6268] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6273] <... mmap resumed>) = 0x7efd74b1c000 [pid 5069] <... umount2 resumed>) = 0 [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 134.624184][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 134.637376][ T6264] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./65/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./65/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6272] <... write resumed>) = 524288 [pid 6268] <... mount resumed>) = 0 [pid 5069] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./65/bus" [pid 6268] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./66/bus", [pid 5069] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6268] <... openat resumed>) = 3 [pid 6268] chdir("./bus" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./65/binderfs" [pid 5068] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6268] <... chdir resumed>) = 0 [pid 6272] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... unlink resumed>) = 0 [pid 6273] <... write resumed>) = 524288 [pid 6268] ioctl(4, LOOP_CLR_FD [pid 6264] <... write resumed>) = 57344 [pid 5069] getdents64(3, [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6268] <... ioctl resumed>) = 0 [pid 6264] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] openat(AT_FDCWD, "./66/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6273] munmap(0x7efd74b1c000, 138412032 [pid 6272] <... munmap resumed>) = 0 [pid 6268] close(4 [pid 6264] <... futex resumed>) = 0 [pid 5069] close(3 [pid 5068] <... openat resumed>) = 4 [pid 6272] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6268] <... close resumed>) = 0 [pid 6264] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6262] exit_group(0 [pid 5069] <... close resumed>) = 0 [pid 6269] <... futex resumed>) = ? [pid 6264] <... futex resumed>) = ? [pid 6262] <... exit_group resumed>) = ? [pid 6268] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./65" [pid 6272] <... openat resumed>) = 4 [pid 6269] +++ exited with 0 +++ [pid 6268] <... futex resumed>) = 1 [pid 6266] <... futex resumed>) = 0 [pid 6264] +++ exited with 0 +++ [pid 6262] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 5068] newfstatat(4, "", [pid 6273] <... munmap resumed>) = 0 [pid 6272] ioctl(4, LOOP_SET_FD, 3 [pid 6268] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 134.681710][ T6264] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6266] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] mkdir("./66", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6262, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6273] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6266] <... futex resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6268] creat("./bus", 000 [pid 6266] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... openat resumed>) = 4 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6273] ioctl(4, LOOP_SET_FD, 3 [pid 6268] <... creat resumed>) = 4 [pid 5069] <... openat resumed>) = 3 [pid 5067] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6272] <... ioctl resumed>) = 0 [pid 6268] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 6268] <... futex resumed>) = 1 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6266] <... futex resumed>) = 0 [pid 6266] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6268] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5067] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6272] close(3 [pid 6266] <... futex resumed>) = 0 [pid 6266] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6272] <... close resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 6272] mkdir("./bus", 0777 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6274 [pid 6272] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5068] getdents64(4, ./strace-static-x86_64: Process 6274 attached [pid 6274] set_robust_list(0x555555fbc6a0, 24 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./66/bus" [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6274] <... set_robust_list resumed>) = 0 [pid 6274] chdir("./66") = 0 [pid 6274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6272] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... rmdir resumed>) = 0 [pid 5067] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6274] setpgid(0, 0 [pid 6273] <... ioctl resumed>) = 0 [pid 6274] <... setpgid resumed>) = 0 [pid 6273] close(3 [pid 6274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6273] <... close resumed>) = 0 [pid 6274] <... openat resumed>) = 3 [pid 6273] mkdir("./bus", 0777 [pid 6274] write(3, "1000", 4) = 4 [pid 6274] close(3 [pid 6273] <... mkdir resumed>) = 0 [pid 6274] <... close resumed>) = 0 [pid 6274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6273] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6274] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6274] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6274] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6274] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6274] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6275 attached [pid 6275] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6274] <... clone3 resumed> => {parent_tid=[6275]}, 88) = 6275 [ 134.739779][ T6272] loop1: detected capacity change from 0 to 1024 [ 134.755161][ T6273] loop0: detected capacity change from 0 to 1024 [ 134.776548][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6275] <... rseq resumed>) = 0 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], [pid 6273] <... mount resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6275] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6273] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6275] <... set_robust_list resumed>) = 0 [pid 6274] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... openat resumed>) = 3 [pid 6275] rt_sigprocmask(SIG_SETMASK, [], [pid 6274] <... futex resumed>) = 0 [pid 6273] chdir("./bus" [pid 6275] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6274] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6273] <... chdir resumed>) = 0 [pid 6275] memfd_create("syzkaller", 0 [pid 6273] ioctl(4, LOOP_CLR_FD) = 0 [pid 6272] <... mount resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6273] close(4 [pid 6275] <... memfd_create resumed>) = 3 [pid 6273] <... close resumed>) = 0 [ 134.784812][ T6268] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6273] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6266] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] unlink("./66/binderfs" [pid 6275] <... mmap resumed>) = 0x7efd74b1c000 [pid 6273] <... futex resumed>) = 1 [pid 6272] <... openat resumed>) = 3 [pid 6271] <... futex resumed>) = 0 [pid 6266] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... unlink resumed>) = 0 [pid 6272] chdir("./bus" [pid 6271] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6272] <... chdir resumed>) = 0 [pid 6266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6272] ioctl(4, LOOP_CLR_FD [pid 6266] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] close(3 [pid 6272] <... ioctl resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 6266] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6273] creat("./bus", 000) = 4 [pid 6273] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6271] <... futex resumed>) = 0 [pid 6271] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6271] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6266] <... mprotect resumed>) = 0 [pid 5068] rmdir("./66" [pid 6266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... rmdir resumed>) = 0 [pid 6272] close(4 [pid 6266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] mkdir("./67", 0777 [pid 5067] <... umount2 resumed>) = 0 [pid 6275] <... write resumed>) = 524288 [pid 6272] <... close resumed>) = 0 [pid 6266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6266] <... clone3 resumed> => {parent_tid=[6276]}, 88) = 6276 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6276 attached [pid 6266] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... openat resumed>) = 3 [pid 6272] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(AT_FDCWD, "./64/bus", [pid 6272] <... futex resumed>) = 1 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6272] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... futex resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] umount2("./64/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6276] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6276] <... rseq resumed>) = 0 [pid 6272] creat("./bus", 000 [pid 6270] <... futex resumed>) = 0 [pid 6266] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(3 [pid 6276] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5067] openat(AT_FDCWD, "./64/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6276] <... set_robust_list resumed>) = 0 [pid 6266] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 6276] rt_sigprocmask(SIG_SETMASK, [], [pid 6270] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6266] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... openat resumed>) = 4 [pid 6276] creat("./file1", 000 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6277 attached [pid 6272] <... creat resumed>) = 4 [pid 5067] newfstatat(4, "", [pid 6277] set_robust_list(0x555555fbc6a0, 24) = 0 [ 134.815867][ T6268] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.844466][ T6273] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.844901][ T6268] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6277] chdir("./67" [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6277 [pid 6277] <... chdir resumed>) = 0 [pid 6277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6275] munmap(0x7efd74b1c000, 138412032 [pid 6272] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] getdents64(4, [pid 6277] <... prctl resumed>) = 0 [pid 6271] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6277] setpgid(0, 0 [pid 6271] <... futex resumed>) = 0 [pid 6277] <... setpgid resumed>) = 0 [pid 6271] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6272] <... futex resumed>) = 1 [pid 6271] <... mmap resumed>) = 0x7efd7cefb000 [pid 6270] <... futex resumed>) = 0 [pid 6276] <... creat resumed>) = 5 [pid 5067] getdents64(4, [pid 6277] <... openat resumed>) = 3 [pid 6275] <... munmap resumed>) = 0 [pid 6271] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6277] write(3, "1000", 4 [pid 6275] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6271] <... mprotect resumed>) = 0 [pid 6277] <... write resumed>) = 4 [pid 6275] <... openat resumed>) = 4 [pid 6271] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6277] close(3 [pid 6275] ioctl(4, LOOP_SET_FD, 3 [pid 6271] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6271] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6277] <... close resumed>) = 0 [pid 6277] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6271] <... clone3 resumed> => {parent_tid=[6278]}, 88) = 6278 [pid 6271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6271] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6276] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6271] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6266] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6272] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6277] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6278 attached ) = 0 [pid 6277] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5067] close(4 [pid 6278] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6278] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./64/bus" [pid 6276] <... futex resumed>) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6276] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... rmdir resumed>) = 0 [ 134.874772][ T6268] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.881672][ T6273] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.902750][ T6268] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.905425][ T6275] loop4: detected capacity change from 0 to 1024 [ 134.910069][ T6268] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6278] rt_sigprocmask(SIG_SETMASK, [], [pid 6277] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6277] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6277] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6277] <... mprotect resumed>) = 0 [pid 5067] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6278] creat("./file1", 000 [pid 6277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6279]}, 88) = 6279 [pid 6277] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6277] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6275] <... ioctl resumed>) = 0 [pid 6277] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6275] close(3) = 0 [pid 6275] mkdir("./bus", 0777./strace-static-x86_64: Process 6279 attached ) = 0 [pid 6279] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6275] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] newfstatat(AT_FDCWD, "./64/binderfs", [pid 6279] <... rseq resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6279] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6279] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6279] memfd_create("syzkaller", 0 [pid 6271] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] unlink("./64/binderfs" [pid 6275] <... mount resumed>) = 0 [pid 6275] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6275] chdir("./bus") = 0 [pid 6279] <... memfd_create resumed>) = 3 [pid 6275] ioctl(4, LOOP_CLR_FD) = 0 [ 134.930903][ T6273] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.934019][ T6272] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.962890][ T6272] hfsplus: request for non-existent node 16715520 in B*Tree [ 134.966171][ T6273] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6275] close(4 [pid 6270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... unlink resumed>) = 0 [pid 6275] <... close resumed>) = 0 [pid 6275] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6268] <... write resumed>) = 57344 [pid 5067] getdents64(3, [pid 6275] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... futex resumed>) = 0 [pid 6268] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6279] <... mmap resumed>) = 0x7efd74b1c000 [pid 6274] <... futex resumed>) = 0 [pid 6270] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6268] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6274] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... mmap resumed>) = 0x7efd7cefb000 [pid 6268] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... close resumed>) = 0 [pid 6270] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6266] exit_group(0 [pid 5067] rmdir("./64" [pid 6275] <... futex resumed>) = 0 [pid 6274] <... futex resumed>) = 1 [pid 6276] <... futex resumed>) = ? [pid 6275] creat("./bus", 000 [pid 6274] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] <... mprotect resumed>) = 0 [pid 6268] <... futex resumed>) = ? [pid 6266] <... exit_group resumed>) = ? [pid 5067] <... rmdir resumed>) = 0 [pid 6276] +++ exited with 0 +++ [pid 6275] <... creat resumed>) = 4 [pid 6270] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] mkdir("./65", 0777 [pid 6275] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6275] <... futex resumed>) = 1 [pid 6274] <... futex resumed>) = 0 [pid 6275] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 134.972054][ T6272] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6274] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... mkdir resumed>) = 0 [pid 6274] <... futex resumed>) = 0 [pid 6268] +++ exited with 0 +++ [pid 6266] +++ exited with 0 +++ ./strace-static-x86_64: Process 6280 attached [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6280] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6270] <... clone3 resumed> => {parent_tid=[6280]}, 88) = 6280 [pid 6280] <... rseq resumed>) = 0 [pid 6278] <... creat resumed>) = 5 [pid 6274] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... openat resumed>) = 3 [pid 6280] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6280] <... set_robust_list resumed>) = 0 [pid 6270] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6280] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6270] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6280] creat("./file1", 000 [pid 6270] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6278] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6266, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6279] <... write resumed>) = 524288 [pid 6278] <... futex resumed>) = 0 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 6278] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6281 attached [pid 6281] set_robust_list(0x555555fbc6a0, 24 [pid 5070] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6281 [pid 6281] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] chdir("./65" [pid 5070] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6281] <... chdir resumed>) = 0 [ 135.019100][ T6275] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.036170][ T6273] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.049423][ T6272] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] newfstatat(3, "", [pid 6281] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6279] munmap(0x7efd74b1c000, 138412032 [pid 6274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6270] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6279] <... munmap resumed>) = 0 [pid 6279] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6279] ioctl(4, LOOP_SET_FD, 3 [pid 6281] <... prctl resumed>) = 0 [pid 6274] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... write resumed>) = 57344 [pid 5070] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6273] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6281] setpgid(0, 0 [pid 6274] <... futex resumed>) = 0 [pid 6273] <... futex resumed>) = 0 [pid 5070] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... setpgid resumed>) = 0 [pid 6274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 135.065773][ T6272] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.078498][ T6273] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.086980][ T6275] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.100179][ T6275] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.107688][ T6279] loop3: detected capacity change from 0 to 1024 [pid 6273] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6274] <... mmap resumed>) = 0x7efd7cefb000 [pid 6279] <... ioctl resumed>) = 0 [pid 6274] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6271] exit_group(0 [pid 6281] <... openat resumed>) = 3 [pid 6281] write(3, "1000", 4 [pid 6279] close(3 [pid 6278] <... futex resumed>) = ? [pid 6274] <... mprotect resumed>) = 0 [pid 6273] <... futex resumed>) = ? [pid 6271] <... exit_group resumed>) = ? [pid 6281] <... write resumed>) = 4 [pid 6279] <... close resumed>) = 0 [pid 6278] +++ exited with 0 +++ [pid 6273] +++ exited with 0 +++ [pid 6281] close(3 [pid 6279] mkdir("./bus", 0777 [pid 6274] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6271] +++ exited with 0 +++ [pid 6281] <... close resumed>) = 0 [pid 6274] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6271, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6281] symlink("/dev/binderfs", "./binderfs" [pid 6274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6281] <... symlink resumed>) = 0 [pid 6281] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6274] <... clone3 resumed> => {parent_tid=[6282]}, 88) = 6282 [pid 6281] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6274] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6281] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6274] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... openat resumed>) = 3 [pid 6281] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6274] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] newfstatat(3, "", ./strace-static-x86_64: Process 6282 attached [pid 6281] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6280] <... creat resumed>) = 5 [pid 6279] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6282] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6281] <... mprotect resumed>) = 0 [pid 5065] getdents64(3, [pid 6282] <... rseq resumed>) = 0 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6282] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6280] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6272] <... write resumed>) = 57344 [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6272] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6282] <... set_robust_list resumed>) = 0 [pid 6280] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6283 attached [pid 6282] rt_sigprocmask(SIG_SETMASK, [], [pid 6281] <... clone3 resumed> => {parent_tid=[6283]}, 88) = 6283 [pid 6280] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6272] <... futex resumed>) = 0 [pid 6283] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], [pid 6272] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] exit_group(0 [pid 6283] <... rseq resumed>) = 0 [pid 6282] creat("./file1", 000 [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6280] <... futex resumed>) = ? [pid 6272] <... futex resumed>) = ? [pid 6270] <... exit_group resumed>) = ? [pid 6282] <... creat resumed>) = 5 [pid 6280] +++ exited with 0 +++ [pid 6279] <... mount resumed>) = 0 [pid 6282] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6282] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6274] <... futex resumed>) = 0 [pid 6281] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [ 135.108008][ T6275] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.124604][ T6272] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.124895][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 6279] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6281] <... futex resumed>) = 0 [pid 6279] <... openat resumed>) = 3 [pid 6281] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6279] chdir("./bus") = 0 [pid 6283] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6279] ioctl(4, LOOP_CLR_FD [pid 6283] <... set_robust_list resumed>) = 0 [pid 6279] <... ioctl resumed>) = 0 [pid 6283] rt_sigprocmask(SIG_SETMASK, [], [pid 6279] close(4 [pid 5070] <... umount2 resumed>) = 0 [pid 6272] +++ exited with 0 +++ [pid 6270] +++ exited with 0 +++ [pid 6283] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6279] <... close resumed>) = 0 [pid 5070] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6270, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6283] memfd_create("syzkaller", 0 [pid 6279] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 [pid 6279] <... futex resumed>) = 1 [pid 6277] <... futex resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./66/bus", [pid 6279] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6277] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6279] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6277] <... futex resumed>) = 0 [pid 5070] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 6283] <... memfd_create resumed>) = 3 [pid 6279] creat("./bus", 000 [pid 6277] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6279] <... creat resumed>) = 4 [pid 5070] openat(AT_FDCWD, "./66/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6283] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] <... openat resumed>) = 4 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, [pid 6279] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6277] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6277] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] getdents64(4, [pid 6277] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6279] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5070] close(4) = 0 [pid 5070] rmdir("./66/bus") = 0 [pid 5070] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./66/binderfs") = 0 [ 135.173829][ T58] hfsplus: b-tree write err: -5, ino 4 [ 135.196655][ T6275] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.209087][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 5070] getdents64(3, [pid 6283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./66") = 0 [pid 5070] mkdir("./67", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6284 attached [pid 6283] <... write resumed>) = 524288 [pid 5065] <... umount2 resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6284 [pid 6284] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 5065] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6284] chdir("./67" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6277] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] newfstatat(AT_FDCWD, "./65/bus", [pid 6277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6277] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./65/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6284] <... chdir resumed>) = 0 [pid 6277] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... openat resumed>) = 4 [pid 6284] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6277] <... mprotect resumed>) = 0 [pid 6284] <... prctl resumed>) = 0 [pid 6277] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] newfstatat(4, "", [pid 6277] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 6277] <... clone3 resumed> => {parent_tid=[6285]}, 88) = 6285 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6284] setpgid(0, 0 [pid 6277] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] getdents64(4, [pid 6277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6277] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6285 attached [pid 6285] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6284] <... setpgid resumed>) = 0 [pid 6277] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6285] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6277] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6285] <... set_robust_list resumed>) = 0 [pid 6284] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6283] munmap(0x7efd74b1c000, 138412032 [pid 6275] <... write resumed>) = 57344 [pid 5065] close(4 [pid 6285] rt_sigprocmask(SIG_SETMASK, [], [pid 6284] <... openat resumed>) = 3 [pid 6283] <... munmap resumed>) = 0 [pid 6275] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 6285] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6284] write(3, "1000", 4 [pid 6275] <... futex resumed>) = 0 [pid 5065] rmdir("./65/bus" [pid 6285] creat("./file1", 000 [pid 6284] <... write resumed>) = 4 [pid 6283] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6275] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] close(3 [pid 6283] <... openat resumed>) = 4 [pid 6274] exit_group(0 [pid 5065] <... rmdir resumed>) = 0 [pid 6284] <... close resumed>) = 0 [pid 6274] <... exit_group resumed>) = ? [pid 6284] symlink("/dev/binderfs", "./binderfs" [pid 6275] <... futex resumed>) = ? [pid 5065] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6275] +++ exited with 0 +++ [pid 6284] <... symlink resumed>) = 0 [pid 6283] ioctl(4, LOOP_SET_FD, 3 [pid 6282] <... futex resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 135.235512][ T6275] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.268514][ T6279] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6284] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6284] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6284] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6283] <... ioctl resumed>) = 0 [pid 6277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... umount2 resumed>) = 0 [pid 5065] unlink("./65/binderfs" [pid 6284] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5066] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6282] +++ exited with 0 +++ [pid 6274] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 6284] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6274, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6284] <... mprotect resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5066] newfstatat(AT_FDCWD, "./66/bus", [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] close(3 [pid 5066] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./66/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./66/bus" [pid 6284] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./65" [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 5066] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./66", 0777 [pid 6284] <... clone3 resumed> => {parent_tid=[6286]}, 88) = 6286 [pid 5069] newfstatat(3, "", [pid 5066] newfstatat(AT_FDCWD, "./66/binderfs", ./strace-static-x86_64: Process 6286 attached [pid 6284] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6283] close(3 [pid 5069] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6284] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6284] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6284] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6286] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6283] <... close resumed>) = 0 [pid 5066] unlink("./66/binderfs" [pid 5065] <... openat resumed>) = 3 [pid 6286] <... rseq resumed>) = 0 [pid 6283] mkdir("./bus", 0777 [pid 5066] <... unlink resumed>) = 0 [ 135.321392][ T6283] loop2: detected capacity change from 0 to 1024 [ 135.328274][ T6279] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.359004][ T6279] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6286] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6283] <... mkdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6286] <... set_robust_list resumed>) = 0 [pid 5066] getdents64(3, [pid 6286] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6283] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] close(3 [pid 6286] memfd_create("syzkaller", 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6286] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 6286] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] rmdir("./66" [pid 6286] <... mmap resumed>) = 0x7efd74b1c000 [pid 5069] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6286] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5066] mkdir("./67", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6287 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6287 attached [pid 6286] <... write resumed>) = 524288 [pid 5069] newfstatat(AT_FDCWD, "./66/bus", [pid 6287] set_robust_list(0x555555fbc6a0, 24 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] close(3 [pid 6287] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [ 135.373991][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 6287] chdir("./66" [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6288 attached , child_tidptr=0x555555fbc690) = 6288 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6287] <... chdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./66/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6288] set_robust_list(0x555555fbc6a0, 24 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... openat resumed>) = 4 [pid 6288] <... set_robust_list resumed>) = 0 [pid 6287] <... prctl resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 6287] setpgid(0, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6287] <... setpgid resumed>) = 0 [pid 6283] <... mount resumed>) = 0 [pid 6288] chdir("./67" [pid 5069] getdents64(4, [pid 6288] <... chdir resumed>) = 0 [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6283] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6287] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6288] <... prctl resumed>) = 0 [pid 6287] write(3, "1000", 4 [pid 6283] <... openat resumed>) = 3 [pid 5069] getdents64(4, [pid 6288] setpgid(0, 0 [pid 6287] <... write resumed>) = 4 [pid 6283] chdir("./bus" [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6288] <... setpgid resumed>) = 0 [pid 6287] close(3 [pid 6283] <... chdir resumed>) = 0 [pid 5069] close(4 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6287] <... close resumed>) = 0 [pid 6283] ioctl(4, LOOP_CLR_FD [pid 5069] <... close resumed>) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 6286] munmap(0x7efd74b1c000, 138412032 [pid 6283] <... ioctl resumed>) = 0 [pid 5069] rmdir("./66/bus" [pid 6288] <... openat resumed>) = 3 [pid 6287] <... symlink resumed>) = 0 [pid 6286] <... munmap resumed>) = 0 [pid 6283] close(4 [pid 5069] <... rmdir resumed>) = 0 [pid 6287] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6283] <... close resumed>) = 0 [pid 5069] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6288] write(3, "1000", 4 [pid 6287] <... futex resumed>) = 0 [pid 6286] <... openat resumed>) = 4 [pid 6285] <... creat resumed>) = 5 [pid 6283] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6288] <... write resumed>) = 4 [pid 6287] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6286] ioctl(4, LOOP_SET_FD, 3 [pid 6285] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] <... futex resumed>) = 1 [pid 6281] <... futex resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6288] close(3 [pid 6287] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6285] <... futex resumed>) = 0 [pid 6283] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] <... close resumed>) = 0 [pid 6287] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6285] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6281] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs" [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6283] creat("./bus", 000 [pid 6281] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] unlink("./66/binderfs" [pid 6288] <... symlink resumed>) = 0 [pid 6288] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6288] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6283] <... creat resumed>) = 4 [pid 6288] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6283] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6283] <... futex resumed>) = 1 [pid 6281] <... futex resumed>) = 0 [pid 6288] <... clone3 resumed> => {parent_tid=[6289]}, 88) = 6289 [pid 6281] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6287] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 6281] <... futex resumed>) = 0 [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6288] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6281] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] <... mprotect resumed>) = 0 [ 135.423516][ T6279] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] getdents64(3, [pid 6287] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6289 attached [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6289] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6289] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6287] <... clone3 resumed> => {parent_tid=[6290]}, 88) = 6290 [pid 6286] <... ioctl resumed>) = 0 [pid 5069] close(3./strace-static-x86_64: Process 6290 attached [pid 6290] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6290] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6290] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6290] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 6286] close(3 [pid 6281] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... close resumed>) = 0 [pid 6289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] memfd_create("syzkaller", 0 [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6286] <... close resumed>) = 0 [pid 6281] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./66" [pid 6289] <... memfd_create resumed>) = 3 [ 135.480407][ T6286] loop5: detected capacity change from 0 to 1024 [ 135.504658][ T6279] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.516580][ T6283] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6287] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] mkdir("./bus", 0777 [pid 6281] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6281] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] mkdir("./67", 0777) = 0 [pid 6281] <... mmap resumed>) = 0x7efd7cefb000 [pid 6286] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6290] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = 1 [pid 6290] memfd_create("syzkaller", 0 [pid 6281] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... openat resumed>) = 3 [pid 6287] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6290] <... memfd_create resumed>) = 3 [pid 6281] <... mprotect resumed>) = 0 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6286] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6281] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6279] <... write resumed>) = 57344 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6290] <... write resumed>) = 524288 [pid 6289] <... write resumed>) = 524288 [pid 6281] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6279] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6277] exit_group(0 [pid 5069] close(3 [pid 6285] <... futex resumed>) = ? [pid 6279] <... futex resumed>) = ? [pid 6277] <... exit_group resumed>) = ? [pid 6285] +++ exited with 0 +++ [pid 6281] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6279] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [ 135.519868][ T6279] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6291 attached [pid 6277] +++ exited with 0 +++ [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6277, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- ./strace-static-x86_64: Process 6292 attached [pid 6291] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6290] munmap(0x7efd74b1c000, 138412032 [pid 6289] munmap(0x7efd74b1c000, 138412032 [pid 6281] <... clone3 resumed> => {parent_tid=[6291]}, 88) = 6291 [pid 6292] set_robust_list(0x555555fbc6a0, 24 [pid 6291] <... rseq resumed>) = 0 [pid 6292] <... set_robust_list resumed>) = 0 [pid 6291] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6290] <... munmap resumed>) = 0 [pid 6289] <... munmap resumed>) = 0 [pid 6281] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6292 [pid 6291] <... set_robust_list resumed>) = 0 [pid 5068] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6291] rt_sigprocmask(SIG_SETMASK, [], [pid 6290] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6289] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6281] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] chdir("./67" [pid 6291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6281] <... futex resumed>) = 0 [pid 6290] <... openat resumed>) = 4 [pid 6289] <... openat resumed>) = 4 [pid 6286] <... mount resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6286] chdir("./bus") = 0 [pid 6286] ioctl(4, LOOP_CLR_FD) = 0 [pid 6286] close(4) = 0 [pid 6286] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6284] <... futex resumed>) = 0 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 6289] ioctl(4, LOOP_SET_FD, 3 [pid 6286] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6291] creat("./file1", 000 [pid 6281] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] <... chdir resumed>) = 0 [ 135.582025][ T6283] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.602493][ T6283] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.623412][ T6289] loop1: detected capacity change from 0 to 1024 [pid 6292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6290] <... ioctl resumed>) = 0 [pid 6286] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6284] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6286] creat("./bus", 000 [pid 6284] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6286] <... creat resumed>) = 4 [pid 6286] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6284] <... futex resumed>) = 0 [pid 6284] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6284] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6286] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6292] <... prctl resumed>) = 0 [pid 6291] <... creat resumed>) = 5 [pid 6290] close(3 [pid 6289] <... ioctl resumed>) = 0 [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6292] setpgid(0, 0 [pid 5068] getdents64(3, [pid 6292] <... setpgid resumed>) = 0 [pid 6292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6290] <... close resumed>) = 0 [pid 6289] close(3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6291] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6291] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] <... futex resumed>) = 0 [pid 5068] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6290] mkdir("./bus", 0777 [pid 6289] <... close resumed>) = 0 [pid 6289] mkdir("./bus", 0777 [pid 6290] <... mkdir resumed>) = 0 [pid 6289] <... mkdir resumed>) = 0 [pid 6289] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6290] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6292] <... openat resumed>) = 3 [ 135.632286][ T6290] loop0: detected capacity change from 0 to 1024 [ 135.639503][ T6283] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.649793][ T6286] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.658935][ T6286] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.660048][ T6283] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6292] write(3, "1000", 4 [pid 6284] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6289] <... mount resumed>) = 0 [pid 6284] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6284] <... futex resumed>) = 0 [pid 6289] <... openat resumed>) = 3 [pid 6284] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6289] chdir("./bus" [pid 6284] <... mmap resumed>) = 0x7efd7cefb000 [pid 6292] <... write resumed>) = 4 [pid 6289] <... chdir resumed>) = 0 [pid 6284] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6292] close(3 [pid 6289] ioctl(4, LOOP_CLR_FD [pid 6284] <... mprotect resumed>) = 0 [pid 6292] <... close resumed>) = 0 [pid 6289] <... ioctl resumed>) = 0 [pid 6284] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6283] <... write resumed>) = 57344 [pid 6289] close(4 [pid 6284] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6289] <... close resumed>) = 0 [pid 6289] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6289] <... futex resumed>) = 1 [pid 6289] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6284] <... clone3 resumed> => {parent_tid=[6293]}, 88) = 6293 [pid 6284] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6293 attached NULL, 8) = 0 [pid 6293] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6284] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... rseq resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6284] <... futex resumed>) = 0 [pid 6293] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6288] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6284] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] <... set_robust_list resumed>) = 0 [pid 6289] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 6293] rt_sigprocmask(SIG_SETMASK, [], [pid 6289] creat("./bus", 000 [pid 6293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] <... creat resumed>) = 4 [pid 6292] symlink("/dev/binderfs", "./binderfs" [pid 6289] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6290] <... mount resumed>) = 0 [pid 6289] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6293] creat("./file1", 000 [pid 6292] <... symlink resumed>) = 0 [pid 6288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6292] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6283] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6288] <... futex resumed>) = 1 [pid 6289] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6288] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6292] <... futex resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6283] <... futex resumed>) = 0 [pid 6283] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6281] exit_group(0 [ 135.682052][ T6283] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.690953][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 135.691288][ T6286] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.706347][ T6286] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6292] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6291] <... futex resumed>) = ? [pid 6290] <... openat resumed>) = 3 [pid 6283] <... futex resumed>) = ? [pid 6281] <... exit_group resumed>) = ? [pid 6291] +++ exited with 0 +++ [pid 6283] +++ exited with 0 +++ [pid 6281] +++ exited with 0 +++ [pid 6292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6281, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5067] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", [pid 6292] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6292] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6290] chdir("./bus" [pid 6284] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6290] <... chdir resumed>) = 0 [pid 6292] <... mprotect resumed>) = 0 [pid 6290] ioctl(4, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = 0 [pid 6290] <... ioctl resumed>) = 0 [pid 6292] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 135.729738][ T6289] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.745753][ T6286] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.761227][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 135.772363][ T6289] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6290] close(4 [pid 6292] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] newfstatat(AT_FDCWD, "./67/bus", ./strace-static-x86_64: Process 6294 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6294] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] <... rseq resumed>) = 0 [pid 6292] <... clone3 resumed> => {parent_tid=[6294]}, 88) = 6294 [pid 6294] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6293] <... creat resumed>) = 5 [pid 6292] rt_sigprocmask(SIG_SETMASK, [], [pid 6290] <... close resumed>) = 0 [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] openat(AT_FDCWD, "./67/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6293] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] <... set_robust_list resumed>) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6290] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6294] rt_sigprocmask(SIG_SETMASK, [], [pid 6286] <... write resumed>) = 57344 [pid 6294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6293] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] newfstatat(4, "", [pid 6294] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 135.779829][ T6286] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6286] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... futex resumed>) = 1 [pid 6288] <... mmap resumed>) = 0x7efd7cefb000 [pid 6287] <... futex resumed>) = 0 [pid 6286] <... futex resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6294] <... futex resumed>) = 0 [pid 6292] <... futex resumed>) = 1 [pid 6290] creat("./bus", 000 [pid 6287] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6286] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6294] memfd_create("syzkaller", 0 [pid 6292] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6290] <... creat resumed>) = 4 [pid 6288] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6287] <... futex resumed>) = 0 [pid 5068] getdents64(4, [pid 5067] <... umount2 resumed>) = 0 [pid 6288] <... mprotect resumed>) = 0 [pid 6287] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6284] exit_group(0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6293] <... futex resumed>) = ? [pid 6288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6284] <... exit_group resumed>) = ? [pid 5068] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6286] <... futex resumed>) = ? [pid 6293] +++ exited with 0 +++ [pid 6288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6286] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./65/bus", [pid 6294] <... memfd_create resumed>) = 3 [pid 6290] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] close(4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6290] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6284] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5067] umount2("./65/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6288] <... clone3 resumed> => {parent_tid=[6295]}, 88) = 6295 [pid 6287] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./67/bus" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] <... mmap resumed>) = 0x7efd74b1c000 [pid 6290] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6288] rt_sigprocmask(SIG_SETMASK, [], [pid 6287] <... futex resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6284, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5068] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6295 attached [pid 6288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6287] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./65/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6295] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6288] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 6295] <... rseq resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./67/binderfs", [pid 5067] newfstatat(4, "", [pid 5070] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6295] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6288] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6295] <... set_robust_list resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6295] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] unlink("./67/binderfs" [pid 5067] getdents64(4, [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(3, [pid 5067] getdents64(4, [pid 6295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6295] creat("./file1", 000 [pid 5068] close(3 [pid 5067] close(4 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5068] rmdir("./67" [pid 5067] rmdir("./65/bus" [pid 5070] newfstatat(3, "", [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] mkdir("./68", 0777 [pid 5067] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 135.814247][ T6289] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.840744][ T6289] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.844710][ T6290] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] newfstatat(AT_FDCWD, "./65/binderfs", [pid 6294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] getdents64(3, [pid 5068] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] unlink("./65/binderfs" [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... unlink resumed>) = 0 [pid 5068] close(3 [pid 5067] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] close(3) = 0 [pid 5067] rmdir("./65") = 0 [pid 5067] mkdir("./66", 0777 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6296 attached [pid 6295] <... creat resumed>) = 5 [pid 6287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6296 [pid 6296] set_robust_list(0x555555fbc6a0, 24 [pid 6295] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6296] <... set_robust_list resumed>) = 0 [pid 6295] <... futex resumed>) = 0 [pid 6294] <... write resumed>) = 524288 [pid 6288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... openat resumed>) = 3 [pid 6296] chdir("./68" [pid 6295] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] <... futex resumed>) = 0 [pid 6296] <... chdir resumed>) = 0 [pid 6294] munmap(0x7efd74b1c000, 138412032 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6296] <... prctl resumed>) = 0 [pid 5067] close(3 [pid 6296] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 6296] <... setpgid resumed>) = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6296] <... openat resumed>) = 3 [pid 6296] write(3, "1000", 4./strace-static-x86_64: Process 6297 attached ) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6297 [pid 6296] close(3 [pid 6294] <... munmap resumed>) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6294] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6297] set_robust_list(0x555555fbc6a0, 24 [pid 6296] <... close resumed>) = 0 [pid 6287] <... mmap resumed>) = 0x7efd7cefb000 [pid 6294] <... openat resumed>) = 4 [ 135.883806][ T6289] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.896136][ T58] hfsplus: b-tree write err: -5, ino 4 [ 135.901463][ T6290] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.912141][ T6290] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.922574][ T6290] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6296] symlink("/dev/binderfs", "./binderfs" [pid 6297] <... set_robust_list resumed>) = 0 [pid 6296] <... symlink resumed>) = 0 [pid 6294] ioctl(4, LOOP_SET_FD, 3 [pid 6287] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6297] chdir("./66" [pid 6287] <... mprotect resumed>) = 0 [pid 6297] <... chdir resumed>) = 0 [pid 6297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6296] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] setpgid(0, 0 [pid 6296] <... futex resumed>) = 0 [pid 6297] <... setpgid resumed>) = 0 [pid 6296] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6296] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6294] <... ioctl resumed>) = 0 [pid 6287] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6294] close(3 [pid 6296] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6296] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6297] <... openat resumed>) = 3 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6294] <... close resumed>) = 0 [pid 6287] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6297] write(3, "1000", 4 [pid 6296] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6294] mkdir("./bus", 0777 [pid 6287] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6297] <... write resumed>) = 4 [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6297] close(3) = 0 ./strace-static-x86_64: Process 6299 attached ./strace-static-x86_64: Process 6298 attached [pid 6297] symlink("/dev/binderfs", "./binderfs" [pid 6296] <... clone3 resumed> => {parent_tid=[6299]}, 88) = 6299 [pid 6294] <... mkdir resumed>) = 0 [pid 6287] <... clone3 resumed> => {parent_tid=[6298]}, 88) = 6298 [pid 6299] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6298] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6297] <... symlink resumed>) = 0 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], [pid 6294] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6289] <... write resumed>) = 57344 [pid 6287] rt_sigprocmask(SIG_SETMASK, [], [pid 6299] <... rseq resumed>) = 0 [pid 6298] <... rseq resumed>) = 0 [pid 6297] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6289] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6299] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6298] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6297] <... futex resumed>) = 0 [pid 6296] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... futex resumed>) = 0 [pid 6288] exit_group(0 [pid 6287] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... set_robust_list resumed>) = 0 [pid 6298] <... set_robust_list resumed>) = 0 [pid 6297] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6296] <... futex resumed>) = 0 [pid 6294] <... mount resumed>) = 0 [pid 6289] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] <... futex resumed>) = 0 [pid 6298] rt_sigprocmask(SIG_SETMASK, [], [pid 6294] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6287] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6294] <... openat resumed>) = 3 [pid 6294] chdir("./bus" [pid 6299] rt_sigprocmask(SIG_SETMASK, [], [pid 6298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6297] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6296] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6295] <... futex resumed>) = ? [pid 6294] <... chdir resumed>) = 0 [pid 6289] <... futex resumed>) = ? [pid 6288] <... exit_group resumed>) = ? [pid 6298] creat("./file1", 000 [pid 6297] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6295] +++ exited with 0 +++ [pid 6294] ioctl(4, LOOP_CLR_FD [pid 6289] +++ exited with 0 +++ [pid 6294] <... ioctl resumed>) = 0 [pid 6294] close(4 [pid 6299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6294] <... close resumed>) = 0 [pid 6288] +++ exited with 0 +++ [pid 6299] memfd_create("syzkaller", 0 [pid 6297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6294] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... memfd_create resumed>) = 3 [pid 6297] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6297] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6294] <... futex resumed>) = 1 [pid 6292] <... futex resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6299] <... mmap resumed>) = 0x7efd74b1c000 [pid 6297] <... mprotect resumed>) = 0 [pid 6294] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6292] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... restart_syscall resumed>) = 0 [pid 6297] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6292] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 6292] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6297] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6297] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [ 135.931108][ T6289] hfsplus: request for non-existent node 16715520 in B*Tree [ 135.942676][ T6294] loop4: detected capacity change from 0 to 1024 [ 135.949764][ T6290] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6294] creat("./bus", 000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6300 attached [pid 6294] <... creat resumed>) = 4 [pid 5070] newfstatat(AT_FDCWD, "./67/bus", [pid 6300] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6297] <... clone3 resumed> => {parent_tid=[6300]}, 88) = 6300 [pid 6299] <... write resumed>) = 524288 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6300] <... rseq resumed>) = 0 [pid 6294] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], [pid 6294] <... futex resumed>) = 1 [pid 6292] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6294] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6292] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6292] <... futex resumed>) = 0 [pid 6298] <... creat resumed>) = 5 [pid 6297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6292] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6300] <... set_robust_list resumed>) = 0 [pid 6298] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... write resumed>) = 57344 [pid 6300] rt_sigprocmask(SIG_SETMASK, [], [pid 6298] <... futex resumed>) = 0 [pid 6297] <... futex resumed>) = 0 [pid 6287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6298] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6297] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6290] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 3 [pid 6290] <... futex resumed>) = 0 [pid 6300] memfd_create("syzkaller", 0 [pid 6290] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] exit_group(0 [pid 6299] munmap(0x7efd74b1c000, 138412032 [pid 6300] <... memfd_create resumed>) = 3 [pid 6298] <... futex resumed>) = ? [pid 6290] <... futex resumed>) = ? [pid 6287] <... exit_group resumed>) = ? [pid 5070] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 6300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6299] <... munmap resumed>) = 0 [pid 6298] +++ exited with 0 +++ [pid 6290] +++ exited with 0 +++ [pid 6299] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6299] ioctl(4, LOOP_SET_FD, 3 [pid 6287] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 136.001586][ T6290] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.031954][ T6294] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.044279][ T6299] loop3: detected capacity change from 0 to 1024 [pid 5066] getdents64(3, [pid 6300] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] openat(AT_FDCWD, "./67/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 4 [pid 5070] newfstatat(4, "", [pid 6299] <... ioctl resumed>) = 0 [pid 6299] close(3) = 0 [pid 6299] mkdir("./bus", 0777) = 0 [pid 6300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6299] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] getdents64(4, [pid 5065] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6299] <... mount resumed>) = 0 [pid 6292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 3 [pid 6299] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6292] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5065] newfstatat(3, "", [pid 6300] <... write resumed>) = 524288 [pid 6300] munmap(0x7efd74b1c000, 138412032 [pid 6299] <... openat resumed>) = 3 [pid 6292] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6300] <... munmap resumed>) = 0 [pid 6299] chdir("./bus" [pid 6292] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] close(4 [pid 5065] getdents64(3, [pid 6299] <... chdir resumed>) = 0 [pid 6292] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... close resumed>) = 0 [pid 6299] ioctl(4, LOOP_CLR_FD [pid 5070] rmdir("./67/bus" [pid 6299] <... ioctl resumed>) = 0 [pid 6292] <... mprotect resumed>) = 0 [pid 6299] close(4 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6300] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6299] <... close resumed>) = 0 [pid 6292] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... rmdir resumed>) = 0 [pid 5065] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6300] <... openat resumed>) = 4 [pid 6299] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6292] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6299] <... futex resumed>) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6300] ioctl(4, LOOP_SET_FD, 3 [ 136.051088][ T6294] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.059601][ T6294] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.071696][ T58] hfsplus: b-tree write err: -5, ino 4 [ 136.071896][ T6294] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6299] creat("./bus", 000 [pid 6296] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] newfstatat(AT_FDCWD, "./67/binderfs", ./strace-static-x86_64: Process 6301 attached [pid 6300] <... ioctl resumed>) = 0 [pid 6299] <... creat resumed>) = 4 [pid 6296] <... futex resumed>) = 0 [pid 6292] <... clone3 resumed> => {parent_tid=[6301]}, 88) = 6301 [pid 5066] <... umount2 resumed>) = 0 [pid 6296] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6299] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6299] <... futex resumed>) = 1 [pid 6296] <... futex resumed>) = 0 [pid 6296] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6296] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./67/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6299] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] openat(AT_FDCWD, "./67/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6301] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6300] close(3 [pid 6292] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./67/bus" [pid 5070] unlink("./67/binderfs" [pid 6301] <... rseq resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 6301] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6301] <... set_robust_list resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6301] rt_sigprocmask(SIG_SETMASK, [], [ 136.116024][ T6300] loop2: detected capacity change from 0 to 1024 [ 136.116623][ T58] hfsplus: b-tree write err: -5, ino 4 [ 136.149126][ T6294] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.158653][ T6299] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6292] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 6292] <... futex resumed>) = 0 [pid 6292] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6301] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6301] creat("./file1", 000 [pid 5070] close(3) = 0 [pid 5070] rmdir("./67" [pid 6300] mkdir("./bus", 0777 [pid 5065] <... umount2 resumed>) = 0 [pid 6300] <... mkdir resumed>) = 0 [pid 5065] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6296] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6296] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] mkdir("./68", 0777 [pid 5066] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./66/bus", [pid 6300] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6296] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6296] <... mprotect resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6296] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./67/binderfs" [pid 5070] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./66/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6296] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5070] close(3) = 0 [pid 5066] getdents64(3, [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6296] <... clone3 resumed> => {parent_tid=[6302]}, 88) = 6302 [pid 6292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./67") = 0 [pid 5066] mkdir("./68", 0777) = 0 [pid 6296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 6302 attached [pid 6296] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(4, "", [pid 6302] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6301] <... creat resumed>) = 5 [pid 6296] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6303 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6296] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6302] <... rseq resumed>) = 0 [pid 5065] getdents64(4, [pid 6301] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 6302] <... set_robust_list resumed>) = 0 [pid 6301] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] close(3 [pid 6302] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6302] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] close(4 [pid 6302] creat("./file1", 000 [pid 6294] <... write resumed>) = 57344 ./strace-static-x86_64: Process 6303 attached [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6304 [pid 5065] <... close resumed>) = 0 [ 136.161368][ T6294] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.189652][ T6299] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.199487][ T6299] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6303] set_robust_list(0x555555fbc6a0, 24 [pid 6294] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./66/bus" [pid 6294] <... futex resumed>) = 0 [pid 6292] exit_group(0./strace-static-x86_64: Process 6304 attached [pid 6303] <... set_robust_list resumed>) = 0 [pid 6301] <... futex resumed>) = ? [pid 6292] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 6304] set_robust_list(0x555555fbc6a0, 24 [pid 6303] chdir("./68" [pid 6301] +++ exited with 0 +++ [pid 6300] <... mount resumed>) = 0 [pid 6304] <... set_robust_list resumed>) = 0 [pid 6303] <... chdir resumed>) = 0 [pid 6303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6304] chdir("./68" [pid 6303] setpgid(0, 0 [pid 6294] +++ exited with 0 +++ [pid 6292] +++ exited with 0 +++ [pid 5065] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6304] <... chdir resumed>) = 0 [pid 6303] <... setpgid resumed>) = 0 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6304] <... prctl resumed>) = 0 [pid 6303] <... openat resumed>) = 3 [pid 6304] setpgid(0, 0) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6292, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6300] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6304] <... openat resumed>) = 3 [pid 6300] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./66/binderfs", [pid 5069] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] unlink("./66/binderfs" [pid 6303] write(3, "1000", 4 [pid 5069] <... openat resumed>) = 3 [pid 6303] <... write resumed>) = 4 [pid 6302] <... creat resumed>) = 5 [pid 6300] chdir("./bus" [pid 5069] newfstatat(3, "", [pid 5065] <... unlink resumed>) = 0 [pid 6304] write(3, "1000", 4 [pid 6303] close(3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 6304] <... write resumed>) = 4 [pid 6303] <... close resumed>) = 0 [pid 6304] close(3 [pid 6303] symlink("/dev/binderfs", "./binderfs" [pid 6304] <... close resumed>) = 0 [pid 6303] <... symlink resumed>) = 0 [pid 6304] symlink("/dev/binderfs", "./binderfs" [pid 6303] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... symlink resumed>) = 0 [pid 6302] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] <... chdir resumed>) = 0 [pid 6296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] getdents64(3, [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6302] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] close(3 [pid 6302] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] ioctl(4, LOOP_CLR_FD [pid 5069] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 6300] <... ioctl resumed>) = 0 [pid 5065] rmdir("./66" [pid 6304] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 0 [pid 6300] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 6304] <... futex resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6300] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] mkdir("./67", 0777 [pid 6300] <... futex resumed>) = 1 [pid 6300] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6304] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6303] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6297] <... futex resumed>) = 0 [pid 6304] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6303] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6297] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6297] <... futex resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6297] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6304] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6303] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6304] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6303] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... openat resumed>) = 3 [pid 6304] <... mprotect resumed>) = 0 [pid 6303] <... mprotect resumed>) = 0 [pid 6300] creat("./bus", 000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6300] <... creat resumed>) = 4 [pid 6304] <... clone3 resumed> => {parent_tid=[6306]}, 88) = 6306 [pid 6303] <... clone3 resumed> => {parent_tid=[6305]}, 88) = 6305 [pid 6304] rt_sigprocmask(SIG_SETMASK, [], [pid 6303] rt_sigprocmask(SIG_SETMASK, [], [pid 6304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6304] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... futex resumed>) = 0 [pid 6303] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6305 attached [pid 6304] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6303] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6305] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6305] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6305] memfd_create("syzkaller", 0) = 3 [pid 6305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [ 136.256808][ T6299] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.282035][ T6299] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] close(3 [pid 6305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6306 attached [pid 6300] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6299] <... write resumed>) = 57344 [pid 5065] <... close resumed>) = 0 [pid 6306] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6300] <... futex resumed>) = 1 [pid 6299] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... futex resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6306] <... rseq resumed>) = 0 [pid 6300] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6299] <... futex resumed>) = 0 [pid 6297] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6307 attached [pid 6306] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6299] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6297] <... futex resumed>) = 0 [pid 6306] <... set_robust_list resumed>) = 0 [pid 6300] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6307 [pid 6296] exit_group(0 [pid 6307] set_robust_list(0x555555fbc6a0, 24 [pid 6306] rt_sigprocmask(SIG_SETMASK, [], [pid 6297] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... set_robust_list resumed>) = 0 [pid 6302] <... futex resumed>) = ? [pid 6299] <... futex resumed>) = ? [pid 6296] <... exit_group resumed>) = ? [pid 6302] +++ exited with 0 +++ [pid 6307] chdir("./67" [pid 6299] +++ exited with 0 +++ [pid 6296] +++ exited with 0 +++ [pid 6307] <... chdir resumed>) = 0 [pid 6306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6296, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6307] <... prctl resumed>) = 0 [pid 6306] memfd_create("syzkaller", 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 6307] setpgid(0, 0 [pid 6306] <... memfd_create resumed>) = 3 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 6307] <... setpgid resumed>) = 0 [pid 6306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [ 136.313325][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 136.318985][ T6299] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6307] write(3, "1000", 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6307] <... write resumed>) = 4 [pid 6306] <... mmap resumed>) = 0x7efd74b1c000 [pid 6305] <... write resumed>) = 524288 [pid 6305] munmap(0x7efd74b1c000, 138412032 [pid 5069] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6307] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./67/bus", [pid 5068] newfstatat(3, "", [pid 6305] <... munmap resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6305] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6307] <... close resumed>) = 0 [pid 5069] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 6307] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6307] <... symlink resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./67/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6307] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 6307] <... futex resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 5068] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6307] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6305] <... openat resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6307] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] getdents64(4, [pid 6307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] getdents64(4, [pid 6307] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6307] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] close(4 [pid 6307] <... mprotect resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6305] ioctl(4, LOOP_SET_FD, 3 [pid 5069] rmdir("./67/bus" [pid 6307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6307] <... clone3 resumed> => {parent_tid=[6308]}, 88) = 6308 [pid 5069] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6307] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] unlink("./67/binderfs" [pid 6307] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 6297] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6308 attached [pid 5069] close(3 [pid 6308] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5069] <... close resumed>) = 0 [pid 6308] <... rseq resumed>) = 0 [pid 5069] rmdir("./67" [pid 6297] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6308] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5069] <... rmdir resumed>) = 0 [pid 6308] <... set_robust_list resumed>) = 0 [pid 6297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] mkdir("./68", 0777 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6297] <... mmap resumed>) = 0x7efd7cefb000 [pid 6308] memfd_create("syzkaller", 0) = 3 [pid 6306] <... write resumed>) = 524288 [pid 6297] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... mkdir resumed>) = 0 [pid 6308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6306] munmap(0x7efd74b1c000, 138412032 [pid 6297] <... mprotect resumed>) = 0 [pid 6308] <... mmap resumed>) = 0x7efd74b1c000 [pid 6306] <... munmap resumed>) = 0 [pid 6306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6297] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6306] <... openat resumed>) = 4 [pid 6297] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6306] ioctl(4, LOOP_SET_FD, 3 [pid 6297] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 6309 attached [pid 6308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6306] <... ioctl resumed>) = 0 [pid 6305] <... ioctl resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6309] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6305] close(3 [pid 6297] <... clone3 resumed> => {parent_tid=[6309]}, 88) = 6309 [ 136.366830][ T6300] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.387562][ T58] hfsplus: b-tree write err: -5, ino 4 [ 136.394467][ T6305] loop5: detected capacity change from 0 to 1024 [pid 6309] <... rseq resumed>) = 0 [pid 6305] <... close resumed>) = 0 [pid 6297] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6309] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6306] close(3 [pid 6305] mkdir("./bus", 0777 [pid 6297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6309] <... set_robust_list resumed>) = 0 [pid 6306] <... close resumed>) = 0 [pid 6297] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6309] rt_sigprocmask(SIG_SETMASK, [], [pid 6308] <... write resumed>) = 524288 [pid 6306] mkdir("./bus", 0777 [pid 6305] <... mkdir resumed>) = 0 [pid 6297] <... futex resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6309] creat("./file1", 000) = 5 [pid 6306] <... mkdir resumed>) = 0 [pid 6297] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(3 [pid 6309] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6297] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6309] <... futex resumed>) = 0 [pid 6309] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6306] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... close resumed>) = 0 [pid 6305] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6310 attached , child_tidptr=0x555555fbc690) = 6310 [pid 6310] set_robust_list(0x555555fbc6a0, 24 [pid 6306] <... mount resumed>) = 0 [ 136.413603][ T6306] loop1: detected capacity change from 0 to 1024 [ 136.423442][ T6300] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6306] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6310] <... set_robust_list resumed>) = 0 [pid 6306] <... openat resumed>) = 3 [pid 6308] munmap(0x7efd74b1c000, 138412032 [pid 6306] chdir("./bus" [pid 6305] <... mount resumed>) = 0 [pid 6306] <... chdir resumed>) = 0 [pid 6310] chdir("./68" [pid 6308] <... munmap resumed>) = 0 [pid 6306] ioctl(4, LOOP_CLR_FD [pid 6305] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = 0 [pid 6306] <... ioctl resumed>) = 0 [pid 6305] <... openat resumed>) = 3 [pid 6306] close(4) = 0 [pid 6310] <... chdir resumed>) = 0 [pid 6306] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] chdir("./bus" [pid 6306] <... futex resumed>) = 1 [pid 6304] <... futex resumed>) = 0 [pid 6305] <... chdir resumed>) = 0 [pid 6310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6308] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6306] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6304] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] <... prctl resumed>) = 0 [pid 6308] <... openat resumed>) = 4 [pid 6306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6305] ioctl(4, LOOP_CLR_FD [pid 6304] <... futex resumed>) = 0 [pid 6310] setpgid(0, 0 [pid 6308] ioctl(4, LOOP_SET_FD, 3 [pid 6306] creat("./bus", 000 [pid 6305] <... ioctl resumed>) = 0 [pid 6304] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6310] <... setpgid resumed>) = 0 [pid 6306] <... creat resumed>) = 4 [pid 5068] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6306] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6305] close(4 [pid 6304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6306] <... futex resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./68/bus", [pid 6306] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./68/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6304] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6306] <... futex resumed>) = 0 [pid 6305] <... close resumed>) = 0 [pid 6304] <... futex resumed>) = 1 [pid 5068] newfstatat(4, "", [pid 6306] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6305] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6305] <... futex resumed>) = 1 [pid 6303] <... futex resumed>) = 0 [pid 6303] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 136.461197][ T6300] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.478378][ T6308] loop0: detected capacity change from 0 to 1024 [ 136.486868][ T6300] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6310] <... openat resumed>) = 3 [pid 6305] creat("./bus", 000 [pid 6303] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 6308] <... ioctl resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6308] close(3 [pid 5068] close(4 [pid 6308] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./68/bus") = 0 [pid 5068] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6308] mkdir("./bus", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6308] <... mkdir resumed>) = 0 [pid 5068] unlink("./68/binderfs") = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./68") = 0 [pid 5068] mkdir("./69", 0777) = 0 [pid 6310] write(3, "1000", 4 [pid 6305] <... creat resumed>) = 4 [pid 6310] <... write resumed>) = 4 [pid 6305] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6305] <... futex resumed>) = 1 [pid 6310] close(3 [pid 6305] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] <... futex resumed>) = 0 [pid 6310] <... close resumed>) = 0 [pid 6303] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] symlink("/dev/binderfs", "./binderfs" [pid 6305] <... futex resumed>) = 0 [pid 6303] <... futex resumed>) = 1 [pid 6305] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6303] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6310] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6310] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6310] <... futex resumed>) = 0 [pid 6304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6310] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6304] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6304] <... futex resumed>) = 0 [ 136.505036][ T6306] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.528411][ T6300] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.547527][ T6306] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6311 [pid 6304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6308] <... mount resumed>) = 0 [pid 6304] <... mmap resumed>) = 0x7efd7cefb000 [pid 6310] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6308] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6311 attached [pid 6311] set_robust_list(0x555555fbc6a0, 24 [pid 6310] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6311] <... set_robust_list resumed>) = 0 [pid 6310] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6311] chdir("./69" [pid 6310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6304] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6311] <... chdir resumed>) = 0 [pid 6304] <... mprotect resumed>) = 0 [pid 6311] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6308] chdir("./bus" [pid 6311] <... prctl resumed>) = 0 [pid 6308] <... chdir resumed>) = 0 [pid 6311] setpgid(0, 0 [pid 6308] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6312 attached [pid 6311] <... setpgid resumed>) = 0 [pid 6308] <... ioctl resumed>) = 0 [pid 6312] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6310] <... clone3 resumed> => {parent_tid=[6312]}, 88) = 6312 [pid 6312] <... rseq resumed>) = 0 [pid 6310] rt_sigprocmask(SIG_SETMASK, [], [pid 6308] close(4 [pid 6304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6312] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6303] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6303] <... futex resumed>) = 0 [pid 6312] <... set_robust_list resumed>) = 0 [pid 6304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6312] rt_sigprocmask(SIG_SETMASK, [], [pid 6310] <... futex resumed>) = 0 [pid 6312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6310] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6308] <... close resumed>) = 0 [pid 6303] <... mmap resumed>) = 0x7efd7cefb000 [pid 6312] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6313 attached ) = 3 [pid 6311] <... openat resumed>) = 3 [pid 6308] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... clone3 resumed> => {parent_tid=[6313]}, 88) = 6313 [pid 6303] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6311] write(3, "1000", 4 [pid 6308] <... futex resumed>) = 1 [pid 6307] <... futex resumed>) = 0 [pid 6311] <... write resumed>) = 4 [pid 6308] creat("./bus", 000 [pid 6307] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] <... mmap resumed>) = 0x7efd74b1c000 [pid 6313] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6311] close(3 [pid 6308] <... creat resumed>) = 4 [pid 6307] <... futex resumed>) = 0 [pid 6304] rt_sigprocmask(SIG_SETMASK, [], [pid 6303] <... mprotect resumed>) = 0 [pid 6313] <... rseq resumed>) = 0 [pid 6311] <... close resumed>) = 0 [pid 6308] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6313] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6311] symlink("/dev/binderfs", "./binderfs" [pid 6308] <... futex resumed>) = 0 [pid 6307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6313] <... set_robust_list resumed>) = 0 [ 136.560755][ T6305] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.572661][ T6300] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.586747][ T6306] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.596673][ T6305] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6311] <... symlink resumed>) = 0 [pid 6308] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6307] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6313] rt_sigprocmask(SIG_SETMASK, [], [pid 6312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6311] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... futex resumed>) = 0 [pid 6304] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6300] <... write resumed>) = 57344 [pid 6313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6311] <... futex resumed>) = 0 [pid 6307] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6304] <... futex resumed>) = 0 [pid 6303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6300] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6313] creat("./file1", 000 [pid 6308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6297] exit_group(0 [pid 6309] <... futex resumed>) = ? [pid 6308] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6304] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6300] <... futex resumed>) = ? [pid 6297] <... exit_group resumed>) = ? [pid 6309] +++ exited with 0 +++ [pid 6303] <... clone3 resumed> => {parent_tid=[6314]}, 88) = 6314 [pid 6303] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6314 attached [pid 6311] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6300] +++ exited with 0 +++ [pid 6297] +++ exited with 0 +++ [pid 6314] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6311] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6303] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6297, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6314] <... rseq resumed>) = 0 [pid 6311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6303] <... futex resumed>) = 0 [pid 6314] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6303] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6314] <... set_robust_list resumed>) = 0 [pid 6311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6314] rt_sigprocmask(SIG_SETMASK, [], [pid 6311] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6311] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6314] creat("./file1", 000 [pid 6313] <... creat resumed>) = 5 [pid 6311] <... mprotect resumed>) = 0 [pid 5067] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6313] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6311] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6313] <... futex resumed>) = 1 [pid 6311] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6304] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5067] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6315 attached [pid 6313] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6311] <... clone3 resumed> => {parent_tid=[6315]}, 88) = 6315 [pid 5067] <... openat resumed>) = 3 [pid 6315] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6311] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] newfstatat(3, "", [pid 6315] <... rseq resumed>) = 0 [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6311] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6315] <... set_robust_list resumed>) = 0 [ 136.616213][ T6306] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.625949][ T6305] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.645958][ T6308] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6311] <... futex resumed>) = 0 [pid 6315] rt_sigprocmask(SIG_SETMASK, [], [pid 6312] <... write resumed>) = 524288 [pid 5067] getdents64(3, [pid 6312] munmap(0x7efd74b1c000, 138412032 [pid 6315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] memfd_create("syzkaller", 0 [pid 6311] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6312] <... munmap resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6315] <... memfd_create resumed>) = 3 [pid 6312] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6312] <... openat resumed>) = 4 [pid 6307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6312] ioctl(4, LOOP_SET_FD, 3 [pid 6307] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6307] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6314] <... creat resumed>) = 5 [pid 6314] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... clone3 resumed> => {parent_tid=[6316]}, 88) = 6316 ./strace-static-x86_64: Process 6316 attached [pid 6314] <... futex resumed>) = 0 [ 136.663232][ T6306] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.670662][ T6305] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.682519][ T58] hfsplus: b-tree write err: -5, ino 4 [ 136.685292][ T6308] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.696447][ T6312] loop4: detected capacity change from 0 to 1024 [ 136.698561][ T6306] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6307] rt_sigprocmask(SIG_SETMASK, [], [pid 6316] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6314] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6316] <... rseq resumed>) = 0 [pid 6315] <... write resumed>) = 524288 [pid 6307] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6316] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6307] <... futex resumed>) = 0 [pid 6316] <... set_robust_list resumed>) = 0 [pid 6307] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6312] <... ioctl resumed>) = 0 [pid 6316] rt_sigprocmask(SIG_SETMASK, [], [pid 6315] munmap(0x7efd74b1c000, 138412032 [pid 6306] <... write resumed>) = 57344 [pid 6316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6315] <... munmap resumed>) = 0 [pid 6306] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6304] exit_group(0 [pid 6316] creat("./file1", 000 [pid 6315] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6306] <... futex resumed>) = -1 (errno 18446744073709551359) [pid 6316] <... creat resumed>) = 5 [pid 6315] <... openat resumed>) = 4 [pid 6313] <... futex resumed>) = ? [pid 6312] close(3 [pid 6306] +++ exited with 0 +++ [pid 6304] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = 0 [ 136.717740][ T6305] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.733036][ T6308] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.740458][ T6308] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.747888][ T6305] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6316] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] ioctl(4, LOOP_SET_FD, 3 [pid 6313] +++ exited with 0 +++ [pid 6312] <... close resumed>) = 0 [pid 6304] +++ exited with 0 +++ [pid 5067] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6312] mkdir("./bus", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./66/bus", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6304, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6312] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6316] <... futex resumed>) = 1 [pid 6307] <... futex resumed>) = 0 [pid 6305] <... write resumed>) = 57344 [pid 6305] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6305] <... futex resumed>) = 0 [pid 6303] exit_group(0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6314] <... futex resumed>) = ? [pid 6303] <... exit_group resumed>) = ? [pid 5066] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6314] +++ exited with 0 +++ [pid 6312] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6305] +++ exited with 0 +++ [pid 6303] +++ exited with 0 +++ [pid 5067] umount2("./66/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6303, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6316] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./66/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] newfstatat(3, "", [pid 5067] <... openat resumed>) = 4 [pid 5067] newfstatat(4, "", [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6315] <... ioctl resumed>) = 0 [pid 6315] close(3) = 0 [pid 6315] mkdir("./bus", 0777 [pid 5070] getdents64(3, [pid 5067] getdents64(4, [pid 6315] <... mkdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6312] <... mount resumed>) = 0 [pid 5067] close(4 [pid 6315] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6312] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [pid 6312] <... openat resumed>) = 3 [pid 6312] chdir("./bus") = 0 [ 136.765039][ T6308] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.774799][ T6315] loop3: detected capacity change from 0 to 1024 [ 136.792798][ T58] hfsplus: b-tree write err: -5, ino 4 [ 136.800844][ T6308] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6312] ioctl(4, LOOP_CLR_FD [pid 5067] rmdir("./66/bus" [pid 6312] <... ioctl resumed>) = 0 [pid 6312] close(4) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6312] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] <... mount resumed>) = 0 [pid 6312] <... futex resumed>) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6310] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6312] creat("./bus", 000 [pid 6315] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6312] <... creat resumed>) = 4 [pid 5067] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] <... openat resumed>) = 3 [pid 6312] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6315] chdir("./bus" [pid 6312] <... futex resumed>) = 1 [pid 6310] <... futex resumed>) = 0 [pid 6308] <... write resumed>) = 57344 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6315] <... chdir resumed>) = 0 [pid 6312] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6310] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6308] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(AT_FDCWD, "./66/binderfs", [pid 6315] ioctl(4, LOOP_CLR_FD [pid 6312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6310] <... futex resumed>) = 0 [pid 6308] <... futex resumed>) = 0 [pid 6307] exit_group(0 [pid 6316] <... futex resumed>) = ? [pid 6315] <... ioctl resumed>) = 0 [pid 6312] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6310] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... exit_group resumed>) = ? [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6316] +++ exited with 0 +++ [pid 6315] close(4 [pid 6308] +++ exited with 0 +++ [pid 6307] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6307, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 6315] <... close resumed>) = 0 [pid 6315] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6311] <... futex resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 6311] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] unlink("./66/binderfs" [pid 6315] creat("./bus", 000) = 4 [pid 5065] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6315] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... unlink resumed>) = 0 [pid 6311] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6311] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6311] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6315] <... futex resumed>) = 1 [pid 6315] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5065] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [ 136.814246][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 5067] getdents64(3, [pid 5070] <... umount2 resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./68/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./68/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./68/bus") = 0 [pid 5066] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6310] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6310] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6317]}, 88) = 6317 [pid 6310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6310] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6310] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./68/binderfs" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./68/bus", [pid 5066] getdents64(3, [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] close(3 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(3, ./strace-static-x86_64: Process 6317 attached [pid 5070] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5066] close(3 [pid 5067] rmdir("./66" [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 136.855179][ T6312] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.873663][ T6315] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.893499][ T6312] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6317] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./67", 0777 [pid 6317] <... rseq resumed>) = 0 [pid 6311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] openat(AT_FDCWD, "./68/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] rmdir("./68" [pid 6317] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6311] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6317] <... set_robust_list resumed>) = 0 [pid 6311] <... futex resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 5067] <... openat resumed>) = 3 [pid 5066] mkdir("./69", 0777 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... mkdir resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, [pid 6311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6311] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6317] rt_sigprocmask(SIG_SETMASK, [], [pid 6311] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6311] <... mprotect resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5067] close(3 [pid 6317] creat("./file1", 000 [pid 6311] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] rmdir("./68/bus" [pid 6311] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 6311] <... clone3 resumed> => {parent_tid=[6318]}, 88) = 6318 [pid 5070] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5066] <... close resumed>) = 0 [pid 6311] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6319 attached [pid 6311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] unlink("./68/binderfs" [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6319 [pid 6311] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... unlink resumed>) = 0 [pid 6319] set_robust_list(0x555555fbc6a0, 24 [pid 6311] <... futex resumed>) = 0 [pid 5070] getdents64(3, ./strace-static-x86_64: Process 6318 attached [pid 6311] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6319] <... set_robust_list resumed>) = 0 [pid 6318] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5065] <... umount2 resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6320 [pid 6319] chdir("./67" [pid 6318] <... rseq resumed>) = 0 [pid 6310] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] close(3 [pid 5065] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] <... chdir resumed>) = 0 [pid 6319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6318] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5070] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6318] <... set_robust_list resumed>) = 0 [pid 5070] rmdir("./68" [pid 5065] newfstatat(AT_FDCWD, "./67/bus", [pid 6319] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6320 attached [pid 6319] setpgid(0, 0 [pid 6318] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6319] <... setpgid resumed>) = 0 [pid 5065] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6320] set_robust_list(0x555555fbc6a0, 24 [pid 6318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] mkdir("./69", 0777 [pid 6318] creat("./file1", 000 [pid 5070] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 136.903950][ T6315] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.911753][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 136.931677][ T6312] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.939201][ T6312] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.948561][ T6315] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] openat(AT_FDCWD, "./67/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6320] <... set_robust_list resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 6320] chdir("./69" [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5065] newfstatat(4, "", [pid 6320] <... chdir resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] close(3 [pid 5065] getdents64(4, [pid 6320] <... prctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6320] setpgid(0, 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6320] <... setpgid resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(4, [pid 6320] <... openat resumed>) = 3 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6321 [pid 6320] write(3, "1000", 4 [pid 6319] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6321 attached [pid 6320] <... write resumed>) = 4 [pid 5065] close(4 [pid 6321] set_robust_list(0x555555fbc6a0, 24 [pid 6320] close(3 [pid 6319] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./67/bus" [pid 6321] <... set_robust_list resumed>) = 0 [pid 6320] <... close resumed>) = 0 [pid 6321] chdir("./69" [pid 6320] symlink("/dev/binderfs", "./binderfs" [pid 6321] <... chdir resumed>) = 0 [pid 6320] <... symlink resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6319] <... write resumed>) = 4 [pid 6321] <... prctl resumed>) = 0 [pid 6320] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] close(3 [pid 5065] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6321] setpgid(0, 0 [pid 6320] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6321] <... setpgid resumed>) = 0 [pid 6320] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6319] <... close resumed>) = 0 [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6320] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6321] <... openat resumed>) = 3 [pid 6320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6319] symlink("/dev/binderfs", "./binderfs" [pid 5065] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6321] write(3, "1000", 4 [pid 6320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6321] <... write resumed>) = 4 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6321] close(3 [pid 6320] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6319] <... symlink resumed>) = 0 [pid 5065] unlink("./67/binderfs" [pid 6321] <... close resumed>) = 0 [pid 6320] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6317] <... creat resumed>) = 5 [pid 6321] symlink("/dev/binderfs", "./binderfs" [pid 6320] <... mprotect resumed>) = 0 [pid 6319] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... unlink resumed>) = 0 [pid 6321] <... symlink resumed>) = 0 [pid 6320] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6319] <... futex resumed>) = 0 [pid 6317] <... futex resumed>) = 0 [pid 6320] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6317] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6319] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] getdents64(3, ./strace-static-x86_64: Process 6322 attached [pid 6321] <... futex resumed>) = 0 [pid 6319] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6311] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6321] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6320] <... clone3 resumed> => {parent_tid=[6322]}, 88) = 6322 [pid 6321] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], [pid 6319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] close(3 [pid 6321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6320] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6320] <... futex resumed>) = 0 [pid 6319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 6321] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6320] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6321] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6319] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] rmdir("./67" [pid 6322] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6321] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6319] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6321] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6322] <... rseq resumed>) = 0 [pid 6319] <... mprotect resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6321] <... clone3 resumed> => {parent_tid=[6323]}, 88) = 6323 [pid 6322] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6321] rt_sigprocmask(SIG_SETMASK, [], [pid 6319] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] mkdir("./68", 0777 [pid 6322] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6323 attached [pid 6322] rt_sigprocmask(SIG_SETMASK, [], [pid 6321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6323] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6321] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 136.974275][ T6315] hfsplus: request for non-existent node 16715520 in B*Tree [ 136.993926][ T6312] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.006864][ T6315] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6323] <... rseq resumed>) = 0 [pid 6322] memfd_create("syzkaller", 0 [pid 6321] <... futex resumed>) = 0 [pid 6319] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6322] <... memfd_create resumed>) = 3 [pid 6319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6323] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6321] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6323] <... set_robust_list resumed>) = 0 [pid 6323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6324 attached [pid 6323] memfd_create("syzkaller", 0 [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... openat resumed>) = 3 [pid 6323] <... memfd_create resumed>) = 3 [pid 6323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] <... clone3 resumed> => {parent_tid=[6324]}, 88) = 6324 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6324] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6323] <... mmap resumed>) = 0x7efd74b1c000 [pid 6322] <... mmap resumed>) = 0x7efd74b1c000 [pid 6324] <... rseq resumed>) = 0 [pid 6323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6319] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6324] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] close(3 [pid 6324] <... set_robust_list resumed>) = 0 [pid 6319] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] rt_sigprocmask(SIG_SETMASK, [], [pid 6319] <... futex resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6319] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6312] <... write resumed>) = 57344 [pid 6324] memfd_create("syzkaller", 0 [pid 6312] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6324] <... memfd_create resumed>) = 3 [pid 6312] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] <... creat resumed>) = 5 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6318] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6310] exit_group(0 [pid 6318] <... futex resumed>) = 0 [pid 6317] <... futex resumed>) = ? [pid 6315] <... write resumed>) = 57344 [pid 6312] <... futex resumed>) = ? [pid 6310] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6325 attached [pid 6324] <... mmap resumed>) = 0x7efd74b1c000 [pid 6322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6318] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6317] +++ exited with 0 +++ [pid 6315] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6312] +++ exited with 0 +++ [pid 6310] +++ exited with 0 +++ [pid 6325] set_robust_list(0x555555fbc6a0, 24 [pid 6324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6311] exit_group(0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6310, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6325 [pid 6318] <... futex resumed>) = ? [pid 6311] <... exit_group resumed>) = ? [pid 6325] <... set_robust_list resumed>) = 0 [pid 6318] +++ exited with 0 +++ [pid 6315] <... futex resumed>) = ? [pid 6325] chdir("./68" [pid 6315] +++ exited with 0 +++ [pid 6311] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6311, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5069] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6323] <... write resumed>) = 524288 [ 137.022415][ T6312] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.031993][ T6315] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6325] <... chdir resumed>) = 0 [pid 6324] <... write resumed>) = 524288 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6324] munmap(0x7efd74b1c000, 138412032 [pid 6323] munmap(0x7efd74b1c000, 138412032 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6325] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6324] <... munmap resumed>) = 0 [pid 6323] <... munmap resumed>) = 0 [pid 6322] <... write resumed>) = 524288 [pid 5069] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6325] <... prctl resumed>) = 0 [pid 6322] munmap(0x7efd74b1c000, 138412032 [pid 6325] setpgid(0, 0 [pid 6324] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6323] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] newfstatat(3, "", [pid 5068] <... openat resumed>) = 3 [pid 6325] <... setpgid resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 6325] <... openat resumed>) = 3 [pid 6322] <... munmap resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 6324] <... openat resumed>) = 4 [pid 6323] <... openat resumed>) = 4 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6324] ioctl(4, LOOP_SET_FD, 3 [pid 6323] ioctl(4, LOOP_SET_FD, 3 [pid 5069] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6325] write(3, "1000", 4) = 4 [pid 5068] getdents64(3, [pid 6323] <... ioctl resumed>) = 0 [pid 6323] close(3) = 0 [pid 6323] mkdir("./bus", 0777) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6323] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6322] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6325] close(3 [pid 6322] ioctl(4, LOOP_SET_FD, 3 [pid 5068] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] <... ioctl resumed>) = 0 [pid 6325] <... close resumed>) = 0 [pid 6323] <... mount resumed>) = 0 [pid 6325] symlink("/dev/binderfs", "./binderfs" [pid 6322] <... ioctl resumed>) = 0 [pid 6325] <... symlink resumed>) = 0 [pid 6325] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] close(3 [pid 6323] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6322] close(3 [pid 6323] <... openat resumed>) = 3 [pid 6322] <... close resumed>) = 0 [pid 6325] <... futex resumed>) = 0 [ 137.118763][ T6323] loop5: detected capacity change from 0 to 1024 [ 137.128151][ T6324] loop2: detected capacity change from 0 to 1024 [ 137.152893][ T6322] loop1: detected capacity change from 0 to 1024 [ 137.160725][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6322] mkdir("./bus", 0777 [pid 6325] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6324] <... close resumed>) = 0 [pid 6323] chdir("./bus" [pid 6324] mkdir("./bus", 0777 [pid 6323] <... chdir resumed>) = 0 [pid 6325] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6324] <... mkdir resumed>) = 0 [pid 6323] ioctl(4, LOOP_CLR_FD [pid 6322] <... mkdir resumed>) = 0 [pid 6325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6323] <... ioctl resumed>) = 0 [pid 6325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6323] close(4 [pid 6322] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6324] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6323] <... close resumed>) = 0 [pid 6325] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6323] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... mount resumed>) = 0 [pid 6325] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6321] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6322] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6323] creat("./bus", 000./strace-static-x86_64: Process 6326 attached ) = 4 [pid 6322] <... openat resumed>) = 3 [pid 6326] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6325] <... clone3 resumed> => {parent_tid=[6326]}, 88) = 6326 [ 137.161312][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6323] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... rseq resumed>) = 0 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], [pid 6324] <... mount resumed>) = 0 [pid 6323] <... futex resumed>) = 1 [pid 6322] chdir("./bus" [pid 6321] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 6326] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6324] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6322] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6326] <... set_robust_list resumed>) = 0 [pid 6325] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... openat resumed>) = 3 [pid 6321] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] ioctl(4, LOOP_CLR_FD [pid 6324] chdir("./bus" [pid 6321] <... futex resumed>) = 0 [pid 6324] <... chdir resumed>) = 0 [pid 6321] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6324] ioctl(4, LOOP_CLR_FD) = 0 [pid 6323] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6322] <... ioctl resumed>) = 0 [pid 6325] <... futex resumed>) = 0 [pid 6325] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6324] close(4 [pid 6322] close(4 [pid 6324] <... close resumed>) = 0 [pid 6322] <... close resumed>) = 0 [pid 6324] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = 1 [pid 6322] <... futex resumed>) = 1 [pid 6320] <... futex resumed>) = 0 [pid 6319] <... futex resumed>) = 0 [pid 6326] rt_sigprocmask(SIG_SETMASK, [], [pid 6324] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6322] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6320] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6320] <... futex resumed>) = 0 [pid 6319] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] creat("./bus", 000 [pid 6326] memfd_create("syzkaller", 0 [pid 6324] <... futex resumed>) = 0 [pid 6320] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = 1 [pid 6326] <... memfd_create resumed>) = 3 [pid 6324] creat("./bus", 000 [pid 6319] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6324] <... creat resumed>) = 4 [pid 6322] <... creat resumed>) = 4 [pid 6326] <... mmap resumed>) = 0x7efd74b1c000 [pid 6324] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6324] <... futex resumed>) = 1 [pid 6319] <... futex resumed>) = 0 [pid 6324] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6319] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] <... futex resumed>) = 0 [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6324] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6322] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] <... futex resumed>) = 1 [pid 6320] <... futex resumed>) = 0 [pid 6319] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./69/bus", [pid 6320] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6320] <... futex resumed>) = 0 [pid 6320] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(AT_FDCWD, "./68/bus", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6322] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5069] openat(AT_FDCWD, "./68/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, [pid 5068] openat(AT_FDCWD, "./69/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5069] close(4) = 0 [pid 5069] rmdir("./68/bus") = 0 [pid 5069] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6321] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] unlink("./68/binderfs" [pid 6321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... unlink resumed>) = 0 [pid 6321] <... mmap resumed>) = 0x7efd7cefb000 [pid 6321] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] getdents64(3, [pid 5068] newfstatat(4, "", [pid 6321] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6321] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] close(3 [pid 6321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./68" [pid 6321] <... clone3 resumed> => {parent_tid=[6327]}, 88) = 6327 [pid 6321] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] mkdir("./69", 0777 [pid 6321] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... mkdir resumed>) = 0 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6327 attached [pid 6326] <... write resumed>) = 524288 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] getdents64(4, [pid 6327] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5069] <... openat resumed>) = 3 [pid 6327] <... rseq resumed>) = 0 [pid 6327] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6327] <... set_robust_list resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6327] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(3 [pid 6327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... close resumed>) = 0 [ 137.240623][ T6323] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.259317][ T6324] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.273264][ T6323] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.277510][ T6322] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6327] creat("./file1", 000 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6327] <... creat resumed>) = 5 [pid 6320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6319] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6319] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6319] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6327] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6327] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] getdents64(4, [pid 6320] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... clone3 resumed> => {parent_tid=[6328]}, 88) = 6328 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6326] munmap(0x7efd74b1c000, 138412032./strace-static-x86_64: Process 6328 attached [pid 6327] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6328] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6328] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] close(4 [pid 6328] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6326] <... munmap resumed>) = 0 [pid 6320] <... futex resumed>) = 0 [pid 6319] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... close resumed>) = 0 [pid 6320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6326] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] rmdir("./69/bus" [pid 6320] <... mmap resumed>) = 0x7efd7cefb000 [pid 6319] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6329 attached [pid 6328] <... futex resumed>) = 0 [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 6320] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6319] <... futex resumed>) = 1 [pid 5068] <... rmdir resumed>) = 0 [pid 6328] creat("./file1", 000 [pid 6319] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6329 [pid 5068] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6320] <... mprotect resumed>) = 0 [ 137.303152][ T6323] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.310493][ T6323] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.311060][ T6324] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.329716][ T6322] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.339002][ T6326] loop0: detected capacity change from 0 to 1024 [pid 6329] set_robust_list(0x555555fbc6a0, 24 [pid 6326] <... ioctl resumed>) = 0 [pid 6320] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6329] <... set_robust_list resumed>) = 0 [pid 6320] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] newfstatat(AT_FDCWD, "./69/binderfs", [pid 6329] chdir("./69") = 0 [pid 6320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6330 attached ) = 0 [pid 6326] close(3 [pid 5068] unlink("./69/binderfs" [pid 6329] setpgid(0, 0 [pid 6326] <... close resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6330] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6329] <... setpgid resumed>) = 0 [pid 6326] mkdir("./bus", 0777 [pid 6320] <... clone3 resumed> => {parent_tid=[6330]}, 88) = 6330 [pid 6326] <... mkdir resumed>) = 0 [pid 6320] rt_sigprocmask(SIG_SETMASK, [], [pid 6330] <... rseq resumed>) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6326] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] getdents64(3, [pid 6320] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6330] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6320] <... futex resumed>) = 0 [pid 5068] close(3 [pid 6329] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 6320] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6330] rt_sigprocmask(SIG_SETMASK, [], [pid 6329] write(3, "1000", 4 [pid 5068] rmdir("./69" [pid 6330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6329] <... write resumed>) = 4 [pid 6330] creat("./file1", 000 [pid 6329] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 6329] <... close resumed>) = 0 [pid 6328] <... creat resumed>) = 5 [pid 6319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] mkdir("./70", 0777 [pid 6329] symlink("/dev/binderfs", "./binderfs" [pid 6328] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6328] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... mkdir resumed>) = 0 [ 137.346845][ T6323] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.351560][ T6324] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.363928][ T6322] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.383148][ T6324] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.392749][ T6323] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6329] <... symlink resumed>) = 0 [pid 6326] <... mount resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 6329] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6326] <... openat resumed>) = 3 [pid 6329] <... futex resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6326] chdir("./bus" [pid 6329] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] close(3 [pid 6330] <... creat resumed>) = 5 [pid 6329] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6326] <... chdir resumed>) = 0 [pid 6320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... close resumed>) = 0 [pid 6330] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6326] ioctl(4, LOOP_CLR_FD [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6326] <... ioctl resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6331 ./strace-static-x86_64: Process 6331 attached [pid 6329] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6326] close(4 [pid 6329] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6331] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6329] <... mprotect resumed>) = 0 [pid 6326] <... close resumed>) = 0 [pid 6326] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] chdir("./70" [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6326] <... futex resumed>) = 1 [pid 6325] <... futex resumed>) = 0 [pid 6326] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6325] <... futex resumed>) = 0 [pid 6323] <... write resumed>) = 57344 [pid 6326] creat("./bus", 000 [pid 6325] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] exit_group(0 [pid 6327] <... futex resumed>) = ? [pid 6321] <... exit_group resumed>) = ? [pid 6327] +++ exited with 0 +++ [pid 6326] <... creat resumed>) = 4 [pid 6331] <... chdir resumed>) = 0 [pid 6329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6326] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... write resumed>) = 57344 [pid 6323] +++ exited with 0 +++ [pid 6321] +++ exited with 0 +++ [pid 6331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6326] <... futex resumed>) = 1 [pid 6325] <... futex resumed>) = 0 [pid 6324] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] exit_group(0 [pid 6331] <... prctl resumed>) = 0 [ 137.406888][ T6324] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.421084][ T6322] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.423969][ T6324] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6326] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6325] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = ? [pid 6319] <... exit_group resumed>) = ? [pid 6331] setpgid(0, 0 [pid 6329] <... clone3 resumed> => {parent_tid=[6332]}, 88) = 6332 [pid 6328] <... futex resumed>) = ? [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6325] <... futex resumed>) = 0 [pid 6324] +++ exited with 0 +++ [pid 6331] <... setpgid resumed>) = 0 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], [pid 6326] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6325] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6332 attached [pid 6331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6328] +++ exited with 0 +++ [pid 6319] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6332] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6331] <... openat resumed>) = 3 [pid 6332] <... rseq resumed>) = 0 [pid 6331] write(3, "1000", 4 [pid 6329] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] <... write resumed>) = 4 [pid 6329] <... futex resumed>) = 0 [pid 6332] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6331] close(3 [pid 6329] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6319, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6332] rt_sigprocmask(SIG_SETMASK, [], [pid 6331] <... close resumed>) = 0 [pid 6332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6332] memfd_create("syzkaller", 0 [pid 6331] <... symlink resumed>) = 0 [pid 5070] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... memfd_create resumed>) = 3 [pid 6331] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6331] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6331] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6332] <... mmap resumed>) = 0x7efd74b1c000 [pid 6331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... openat resumed>) = 3 [pid 6331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5070] newfstatat(3, "", [pid 6331] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 137.459956][ T6322] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.476654][ T6326] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.479603][ T6322] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", ./strace-static-x86_64: Process 6333 attached [pid 6331] <... clone3 resumed> => {parent_tid=[6333]}, 88) = 6333 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6333] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6331] rt_sigprocmask(SIG_SETMASK, [], [pid 6333] <... rseq resumed>) = 0 [pid 6333] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6333] <... set_robust_list resumed>) = 0 [pid 6331] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] rt_sigprocmask(SIG_SETMASK, [], [pid 6331] <... futex resumed>) = 0 [pid 6333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 6333] memfd_create("syzkaller", 0) = 3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6332] <... write resumed>) = 524288 [pid 5067] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... write resumed>) = 57344 [pid 6333] <... write resumed>) = 524288 [pid 6332] munmap(0x7efd74b1c000, 138412032 [pid 6325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6322] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6320] exit_group(0 [pid 6322] <... futex resumed>) = 231 [pid 6332] <... munmap resumed>) = 0 [pid 6330] <... futex resumed>) = ? [pid 6325] <... futex resumed>) = 0 [pid 6322] +++ exited with 0 +++ [pid 6320] <... exit_group resumed>) = ? [pid 6332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6330] +++ exited with 0 +++ [pid 6325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6320] +++ exited with 0 +++ [pid 5070] <... umount2 resumed>) = 0 [pid 6325] <... mmap resumed>) = 0x7efd7cefb000 [pid 6332] <... openat resumed>) = 4 [pid 6325] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6320, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6325] <... mprotect resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6333] munmap(0x7efd74b1c000, 138412032 [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 6325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 137.508840][ T6326] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.526698][ T58] hfsplus: b-tree write err: -5, ino 4 [ 137.530756][ T6326] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.543080][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 137.551525][ T6326] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] newfstatat(3, "", [pid 6333] <... munmap resumed>) = 0 [pid 6325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6333] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] newfstatat(AT_FDCWD, "./69/bus", [pid 5066] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] <... openat resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6333] ioctl(4, LOOP_SET_FD, 3 [pid 6332] <... ioctl resumed>) = 0 [pid 6325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./67/bus", [pid 6325] <... clone3 resumed> => {parent_tid=[6334]}, 88) = 6334 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5067] umount2("./67/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./67/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6325] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] openat(AT_FDCWD, "./69/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(4, "", [pid 6325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6325] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] getdents64(4, [pid 6325] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6334 attached [pid 6332] close(3 [pid 5070] <... openat resumed>) = 4 [pid 5067] getdents64(4, [pid 5066] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6332] <... close resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6332] mkdir("./bus", 0777 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6334] <... rseq resumed>) = 0 [pid 5067] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./67/bus" [pid 6334] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5070] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./69/bus", [pid 6332] <... mkdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] <... set_robust_list resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] getdents64(4, [pid 5067] newfstatat(AT_FDCWD, "./67/binderfs", [pid 6334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6332] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6334] creat("./file1", 000 [pid 5070] close(4 [pid 5066] openat(AT_FDCWD, "./69/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... close resumed>) = 0 [pid 5067] unlink("./67/binderfs" [pid 5066] <... openat resumed>) = 4 [pid 5070] rmdir("./69/bus" [pid 5067] <... unlink resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 5067] getdents64(3, [pid 5070] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 5066] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./67") = 0 [pid 5067] mkdir("./68", 0777) = 0 [ 137.578275][ T6332] loop4: detected capacity change from 0 to 1024 [ 137.590798][ T6326] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.590805][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 137.610220][ T6333] loop3: detected capacity change from 0 to 1024 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6333] <... ioctl resumed>) = 0 [pid 6332] <... mount resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 6333] close(3 [pid 6332] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] newfstatat(AT_FDCWD, "./69/binderfs", [pid 5066] getdents64(4, [pid 6333] <... close resumed>) = 0 [pid 6332] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6333] mkdir("./bus", 0777 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(4 [pid 6333] <... mkdir resumed>) = 0 [pid 6332] chdir("./bus" [pid 5070] unlink("./69/binderfs" [pid 5067] close(3 [pid 5066] <... close resumed>) = 0 [pid 6334] <... creat resumed>) = 5 [pid 6333] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6332] <... chdir resumed>) = 0 [pid 6326] <... write resumed>) = 57344 [pid 5070] <... unlink resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] rmdir("./69/bus" [pid 6334] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] <... mount resumed>) = 0 [pid 6332] ioctl(4, LOOP_CLR_FD [pid 6326] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] getdents64(3, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... rmdir resumed>) = 0 [pid 6334] <... futex resumed>) = 0 [pid 6333] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6332] <... ioctl resumed>) = 0 [pid 6326] <... futex resumed>) = 0 [pid 6325] exit_group(0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] <... openat resumed>) = 3 [pid 6332] close(4 [pid 6325] <... exit_group resumed>) = ? [pid 5070] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6335 attached [pid 6334] +++ exited with 0 +++ [pid 6333] chdir("./bus" [pid 6332] <... close resumed>) = 0 [pid 6326] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./69/binderfs", [pid 6335] set_robust_list(0x555555fbc6a0, 24 [pid 6333] <... chdir resumed>) = 0 [pid 6332] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./69" [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6335] <... set_robust_list resumed>) = 0 [pid 6333] ioctl(4, LOOP_CLR_FD [pid 6332] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6325] +++ exited with 0 +++ [pid 5070] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6335 [pid 5066] unlink("./69/binderfs" [pid 6335] chdir("./68" [pid 6333] <... ioctl resumed>) = 0 [pid 6332] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] mkdir("./70", 0777 [pid 5066] <... unlink resumed>) = 0 [pid 6335] <... chdir resumed>) = 0 [pid 6333] close(4 [pid 6332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6329] <... futex resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 6335] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6333] <... close resumed>) = 0 [pid 6332] creat("./bus", 000 [pid 6329] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6335] <... prctl resumed>) = 0 [pid 6333] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... creat resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6325, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6335] setpgid(0, 0 [pid 6333] <... futex resumed>) = 1 [pid 6331] <... futex resumed>) = 0 [pid 6332] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 5065] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6331] <... futex resumed>) = 0 [pid 5066] rmdir("./69" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6335] <... setpgid resumed>) = 0 [pid 6332] <... futex resumed>) = 1 [pid 6331] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6329] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6333] creat("./bus", 000 [pid 6332] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] <... openat resumed>) = 3 [pid 6333] <... creat resumed>) = 4 [pid 6332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6329] <... futex resumed>) = 0 [ 137.646313][ T6326] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5066] mkdir("./70", 0777 [pid 5065] <... openat resumed>) = 3 [pid 6335] write(3, "1000", 4 [pid 6333] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6329] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... mkdir resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 6335] <... write resumed>) = 4 [pid 6333] <... futex resumed>) = 1 [pid 6331] <... futex resumed>) = 0 [pid 6331] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6331] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 6335] close(3 [pid 6333] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6335] <... close resumed>) = 0 [pid 5065] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6337 attached [pid 6335] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6337 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6336 ./strace-static-x86_64: Process 6336 attached [pid 6336] set_robust_list(0x555555fbc6a0, 24 [pid 6337] set_robust_list(0x555555fbc6a0, 24 [pid 6335] <... symlink resumed>) = 0 [pid 6336] <... set_robust_list resumed>) = 0 [pid 6336] chdir("./70" [pid 6337] <... set_robust_list resumed>) = 0 [pid 6336] <... chdir resumed>) = 0 [pid 6336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6337] chdir("./70" [pid 6335] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] <... chdir resumed>) = 0 [pid 6335] <... futex resumed>) = 0 [pid 6336] <... prctl resumed>) = 0 [pid 6337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6335] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6337] <... prctl resumed>) = 0 [pid 6335] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6335] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6336] setpgid(0, 0) = 0 [pid 6336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6337] setpgid(0, 0 [pid 6335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6337] <... setpgid resumed>) = 0 [pid 6335] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6335] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6336] write(3, "1000", 4 [pid 6337] <... openat resumed>) = 3 [pid 6335] <... mprotect resumed>) = 0 [pid 6337] write(3, "1000", 4 [pid 6335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6337] <... write resumed>) = 4 [pid 6335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6336] <... write resumed>) = 4 [pid 6337] close(3 [pid 6335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6329] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6336] close(3) = 0 [pid 6337] <... close resumed>) = 0 [pid 6329] <... futex resumed>) = 0 [pid 6336] symlink("/dev/binderfs", "./binderfs" [pid 6337] symlink("/dev/binderfs", "./binderfs" [pid 6335] <... clone3 resumed> => {parent_tid=[6338]}, 88) = 6338 [pid 6331] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6338 attached [pid 6336] <... symlink resumed>) = 0 [ 137.709201][ T6332] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.734364][ T6333] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.742318][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 137.750235][ T6332] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] <... umount2 resumed>) = 0 [pid 6338] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6336] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] rt_sigprocmask(SIG_SETMASK, [], [pid 6331] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... mmap resumed>) = 0x7efd7cefb000 [pid 6338] <... rseq resumed>) = 0 [pid 6335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] <... futex resumed>) = 0 [pid 6329] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6338] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6336] <... futex resumed>) = 0 [pid 6337] <... symlink resumed>) = 0 [pid 6335] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6329] <... mprotect resumed>) = 0 [pid 5065] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6338] <... set_robust_list resumed>) = 0 [pid 6336] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6337] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] <... futex resumed>) = 0 [pid 6331] <... mmap resumed>) = 0x7efd7cefb000 [pid 6329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6338] rt_sigprocmask(SIG_SETMASK, [], [pid 6336] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6337] <... futex resumed>) = 0 [pid 6335] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6331] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6338] memfd_create("syzkaller", 0 [pid 6337] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6331] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6339 attached [pid 6338] <... memfd_create resumed>) = 3 [pid 6331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6339] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6329] <... clone3 resumed> => {parent_tid=[6339]}, 88) = 6339 [pid 5065] newfstatat(AT_FDCWD, "./68/bus", [pid 6339] <... rseq resumed>) = 0 [pid 6338] <... mmap resumed>) = 0x7efd74b1c000 [pid 6337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6329] rt_sigprocmask(SIG_SETMASK, [], [pid 6339] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6339] <... set_robust_list resumed>) = 0 [pid 6339] rt_sigprocmask(SIG_SETMASK, [], [pid 6336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6329] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6340 attached [pid 6339] creat("./file1", 000 [pid 6336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6337] <... mprotect resumed>) = 0 [pid 6329] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6340] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6336] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6329] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6340] <... rseq resumed>) = 0 [pid 6336] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [ 137.769447][ T6333] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.779837][ T6332] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.801482][ T6333] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.812307][ T6333] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6331] <... clone3 resumed> => {parent_tid=[6340]}, 88) = 6340 [pid 5065] openat(AT_FDCWD, "./68/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6340] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6339] <... creat resumed>) = 5 [pid 6336] <... mprotect resumed>) = 0 [pid 6337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6331] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... openat resumed>) = 4 [pid 6340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5065] newfstatat(4, "", [pid 6331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6340] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6339] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6336] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6331] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6331] <... futex resumed>) = 0 [pid 5065] getdents64(4, [pid 6340] creat("./file1", 000 [pid 6331] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6340] <... creat resumed>) = 5 [pid 6339] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 6341 attached [pid 6339] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6337] <... clone3 resumed> => {parent_tid=[6341]}, 88) = 6341 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6341] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6338] <... write resumed>) = 524288 [pid 6337] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] close(4 [pid 6341] <... rseq resumed>) = 0 [pid 6341] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5065] <... close resumed>) = 0 [pid 6341] <... set_robust_list resumed>) = 0 [pid 5065] rmdir("./68/bus" [pid 6341] rt_sigprocmask(SIG_SETMASK, [], [pid 6337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6337] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6340] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6338] munmap(0x7efd74b1c000, 138412032 [pid 6336] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6340] <... futex resumed>) = 1 [pid 6336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6331] <... futex resumed>) = 0 [pid 6340] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6341] memfd_create("syzkaller", 0 [pid 6338] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./68/binderfs", [pid 6338] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 6342 attached [pid 6341] <... memfd_create resumed>) = 3 [pid 6338] <... openat resumed>) = 4 [pid 6336] <... clone3 resumed> => {parent_tid=[6342]}, 88) = 6342 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6336] rt_sigprocmask(SIG_SETMASK, [], [pid 6342] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5065] unlink("./68/binderfs" [pid 6342] <... rseq resumed>) = 0 [pid 6336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6342] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6341] <... mmap resumed>) = 0x7efd74b1c000 [pid 6338] ioctl(4, LOOP_SET_FD, 3 [pid 6336] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... unlink resumed>) = 0 [pid 6336] <... futex resumed>) = 0 [ 137.821052][ T6332] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.857768][ T6332] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6336] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6342] <... set_robust_list resumed>) = 0 [pid 6341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] getdents64(3, [pid 6342] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] close(3 [pid 6342] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./68" [pid 6342] <... memfd_create resumed>) = 3 [pid 6341] <... write resumed>) = 524288 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./69", 0777 [pid 6342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6341] munmap(0x7efd74b1c000, 138412032 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6342] <... mmap resumed>) = 0x7efd74b1c000 [pid 6338] <... ioctl resumed>) = 0 [pid 6338] close(3) = 0 [pid 6338] mkdir("./bus", 0777 [pid 6342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6341] <... munmap resumed>) = 0 [pid 6338] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6341] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6341] <... openat resumed>) = 4 [pid 6342] <... write resumed>) = 524288 [pid 6341] ioctl(4, LOOP_SET_FD, 3 [pid 6338] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6333] <... write resumed>) = 57344 [pid 6332] <... write resumed>) = 57344 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6333] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] <... futex resumed>) = 0 [pid 6332] <... futex resumed>) = 0 [pid 6329] exit_group(0 [pid 6339] <... futex resumed>) = ? [pid 6333] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6329] <... exit_group resumed>) = ? [ 137.868782][ T6333] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.879296][ T6338] loop2: detected capacity change from 0 to 1024 [ 137.902428][ T6332] hfsplus: request for non-existent node 16715520 in B*Tree [ 137.911179][ T6333] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6342] munmap(0x7efd74b1c000, 138412032 [pid 6341] <... ioctl resumed>) = 0 [pid 6339] +++ exited with 0 +++ [pid 6332] +++ exited with 0 +++ [pid 6329] +++ exited with 0 +++ [pid 5065] close(3 [pid 6342] <... munmap resumed>) = 0 [pid 6338] <... mount resumed>) = 0 [pid 6338] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6342] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6338] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6338] chdir("./bus" [pid 6342] <... openat resumed>) = 4 [pid 6338] <... chdir resumed>) = 0 [pid 6338] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6343 attached [pid 6342] ioctl(4, LOOP_SET_FD, 3 [pid 6341] close(3 [pid 6331] exit_group(0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6341] <... close resumed>) = 0 [pid 6338] <... ioctl resumed>) = 0 [pid 6333] <... futex resumed>) = ? [pid 6331] <... exit_group resumed>) = ? [pid 6341] mkdir("./bus", 0777 [pid 6338] close(4 [pid 6333] +++ exited with 0 +++ [pid 6341] <... mkdir resumed>) = 0 [pid 6338] <... close resumed>) = 0 [pid 6338] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6338] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6341] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6343] set_robust_list(0x555555fbc6a0, 24 [pid 6342] <... ioctl resumed>) = 0 [pid 6340] <... futex resumed>) = ? [pid 6335] <... futex resumed>) = 0 [pid 5069] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6343 [pid 6340] +++ exited with 0 +++ [pid 6331] +++ exited with 0 +++ [pid 6335] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... set_robust_list resumed>) = 0 [pid 6335] <... futex resumed>) = 1 [pid 6342] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6343] chdir("./69" [pid 6342] <... close resumed>) = 0 [pid 6335] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6331, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5069] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] <... chdir resumed>) = 0 [pid 6342] mkdir("./bus", 0777 [pid 5068] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6342] <... mkdir resumed>) = 0 [pid 6338] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6343] <... prctl resumed>) = 0 [pid 6342] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6338] creat("./bus", 000 [pid 6343] setpgid(0, 0 [pid 6338] <... creat resumed>) = 4 [pid 5069] newfstatat(3, "", [pid 5068] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6343] <... setpgid resumed>) = 0 [pid 6338] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6338] <... futex resumed>) = 1 [pid 6335] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6343] <... openat resumed>) = 3 [pid 6335] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] write(3, "1000", 4 [pid 6338] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6335] <... futex resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] newfstatat(3, "", [pid 6343] <... write resumed>) = 4 [pid 6342] <... mount resumed>) = 0 [pid 6341] <... mount resumed>) = 0 [ 137.943060][ T6341] loop5: detected capacity change from 0 to 1024 [ 137.966014][ T6342] loop1: detected capacity change from 0 to 1024 [pid 6335] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6343] close(3 [pid 6342] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6341] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6343] <... close resumed>) = 0 [pid 6342] <... openat resumed>) = 3 [pid 6343] symlink("/dev/binderfs", "./binderfs" [pid 6342] chdir("./bus" [pid 5068] getdents64(3, [pid 5069] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] <... symlink resumed>) = 0 [pid 6341] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6343] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6341] chdir("./bus") = 0 [pid 6341] ioctl(4, LOOP_CLR_FD) = 0 [pid 6341] close(4) = 0 [pid 6341] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6337] <... futex resumed>) = 0 [pid 6337] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6341] creat("./bus", 000 [pid 6337] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6341] <... creat resumed>) = 4 [pid 6341] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] <... futex resumed>) = 0 [pid 6337] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6337] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6341] <... futex resumed>) = 1 [pid 6341] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6343] <... futex resumed>) = 0 [pid 6342] <... chdir resumed>) = 0 [pid 6342] ioctl(4, LOOP_CLR_FD [pid 6343] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6342] <... ioctl resumed>) = 0 [pid 6343] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6342] close(4) = 0 [pid 6343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6342] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6342] <... futex resumed>) = 1 [pid 6336] <... futex resumed>) = 0 [pid 6343] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6342] creat("./bus", 000 [pid 6336] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6343] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6336] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6343] <... mprotect resumed>) = 0 [pid 6342] <... creat resumed>) = 4 [pid 6343] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6342] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... rt_sigprocmask resumed>[], 8) = 0 [ 138.017589][ T6338] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.028569][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 138.040943][ T6341] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.050019][ T58] hfsplus: b-tree write err: -5, ino 4 [ 138.056840][ T6341] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6344 attached [pid 6342] <... futex resumed>) = 1 [pid 6336] <... futex resumed>) = 0 [pid 6335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6344] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6343] <... clone3 resumed> => {parent_tid=[6344]}, 88) = 6344 [pid 6342] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6336] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] rt_sigprocmask(SIG_SETMASK, [], [pid 6336] <... futex resumed>) = 0 [pid 6343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6336] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... rseq resumed>) = 0 [pid 6343] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6344] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6343] <... futex resumed>) = 0 [pid 6344] <... set_robust_list resumed>) = 0 [pid 6343] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6335] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6335] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6335] <... mmap resumed>) = 0x7efd7cefb000 [pid 6337] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6344] rt_sigprocmask(SIG_SETMASK, [], [pid 6342] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6337] <... futex resumed>) = 0 [ 138.065688][ T6338] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6335] <... mprotect resumed>) = 0 [pid 6344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6337] <... mmap resumed>) = 0x7efd7cefb000 [pid 6337] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6335] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6335] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6335] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6335] <... clone3 resumed> => {parent_tid=[6345]}, 88) = 6345 [pid 6337] <... clone3 resumed> => {parent_tid=[6346]}, 88) = 6346 [pid 6335] rt_sigprocmask(SIG_SETMASK, [], [pid 6337] rt_sigprocmask(SIG_SETMASK, [], [pid 6335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6335] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6337] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] <... futex resumed>) = 0 [pid 6337] <... futex resumed>) = 0 [pid 6335] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] memfd_create("syzkaller", 0 [pid 6337] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6344] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6346 attached [pid 6344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6345 attached [pid 6346] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6344] <... mmap resumed>) = 0x7efd74b1c000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6345] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 5069] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6345] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6345] <... set_robust_list resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./69/bus", [pid 6345] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6345] creat("./file1", 000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6346] <... rseq resumed>) = 0 [pid 6344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] openat(AT_FDCWD, "./69/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(AT_FDCWD, "./70/bus", [pid 6346] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6346] rt_sigprocmask(SIG_SETMASK, [], [pid 6336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... openat resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6346] creat("./file1", 000 [pid 6336] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] <... futex resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 138.091455][ T6341] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.098880][ T6341] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.107433][ T6338] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.109758][ T6342] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] openat(AT_FDCWD, "./70/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6336] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 6336] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] newfstatat(4, "", [pid 6336] <... mprotect resumed>) = 0 [pid 5069] getdents64(4, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6336] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(4, [pid 6336] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] close(4 [pid 6336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./69/bus" [pid 6336] <... clone3 resumed> => {parent_tid=[6347]}, 88) = 6347 [pid 5069] <... rmdir resumed>) = 0 [pid 6336] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6336] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(AT_FDCWD, "./69/binderfs", [pid 6336] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6336] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] unlink("./69/binderfs") = 0 [pid 5069] getdents64(3, [pid 6337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6335] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6347 attached [pid 5069] close(3 [pid 6347] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5069] <... close resumed>) = 0 [pid 6347] <... rseq resumed>) = 0 [pid 5069] rmdir("./69" [pid 6347] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5069] <... rmdir resumed>) = 0 [pid 6347] <... set_robust_list resumed>) = 0 [pid 5069] mkdir("./70", 0777 [pid 6347] rt_sigprocmask(SIG_SETMASK, [], [pid 6346] <... creat resumed>) = 5 [pid 6344] <... write resumed>) = 524288 [ 138.138260][ T6338] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.161487][ T6342] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.170137][ T6342] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6346] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6345] <... creat resumed>) = 5 [pid 6344] munmap(0x7efd74b1c000, 138412032 [pid 5068] getdents64(4, [pid 6346] <... futex resumed>) = 0 [pid 6346] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6347] creat("./file1", 000 [pid 6345] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] <... munmap resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] close(4 [pid 5069] <... openat resumed>) = 3 [pid 6336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6345] <... futex resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6345] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] close(3 [pid 5068] <... close resumed>) = 0 [pid 6344] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] <... close resumed>) = 0 [pid 6344] <... openat resumed>) = 4 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6348 attached [pid 6344] ioctl(4, LOOP_SET_FD, 3 [pid 5068] rmdir("./70/bus" [pid 6348] set_robust_list(0x555555fbc6a0, 24 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6348 [pid 5068] <... rmdir resumed>) = 0 [pid 6348] <... set_robust_list resumed>) = 0 [pid 6344] <... ioctl resumed>) = 0 [ 138.191020][ T6342] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.197531][ T6341] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.208474][ T6338] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.211536][ T6342] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.229200][ T6344] loop0: detected capacity change from 0 to 1024 [pid 5068] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6348] chdir("./70" [pid 6344] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6347] <... creat resumed>) = 5 [pid 6347] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6347] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6342] <... write resumed>) = 57344 [pid 6342] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6342] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6336] exit_group(0 [pid 6347] <... futex resumed>) = ? [pid 6342] <... futex resumed>) = ? [pid 6336] <... exit_group resumed>) = ? [pid 6347] +++ exited with 0 +++ [pid 6342] +++ exited with 0 +++ [pid 6336] +++ exited with 0 +++ [pid 6344] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6344] mkdir("./bus", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6336, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6348] <... chdir resumed>) = 0 [pid 6344] <... mkdir resumed>) = 0 [pid 5068] unlink("./70/binderfs" [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6344] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6348] <... prctl resumed>) = 0 [pid 6348] setpgid(0, 0 [pid 5066] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6348] <... setpgid resumed>) = 0 [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6348] write(3, "1000", 4 [pid 5068] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6338] <... write resumed>) = 57344 [pid 6338] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6335] exit_group(0 [pid 6348] <... write resumed>) = 4 [pid 6345] <... futex resumed>) = ? [pid 6338] <... futex resumed>) = ? [pid 6335] <... exit_group resumed>) = ? [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 6348] close(3 [pid 6345] +++ exited with 0 +++ [pid 6338] +++ exited with 0 +++ [pid 5066] newfstatat(3, "", [pid 6348] <... close resumed>) = 0 [pid 6344] <... mount resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 6344] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6335] +++ exited with 0 +++ [pid 5068] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6348] <... symlink resumed>) = 0 [pid 6344] <... openat resumed>) = 3 [pid 6348] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6335, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6348] <... futex resumed>) = 0 [pid 5068] rmdir("./70" [pid 6348] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5067] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [ 138.246015][ T6342] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.249622][ T6338] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.255741][ T6341] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6344] chdir("./bus" [pid 6348] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6341] <... write resumed>) = 57344 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6344] <... chdir resumed>) = 0 [pid 6341] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6344] ioctl(4, LOOP_CLR_FD [pid 6341] <... futex resumed>) = 0 [pid 5068] mkdir("./71", 0777 [pid 5067] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6344] <... ioctl resumed>) = 0 [pid 6341] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6337] exit_group(0 [pid 5066] <... umount2 resumed>) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6346] <... futex resumed>) = ? [pid 6337] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 6346] +++ exited with 0 +++ [pid 6348] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6344] close(4 [pid 6341] <... futex resumed>) = ? [pid 5067] newfstatat(3, "", [pid 6344] <... close resumed>) = 0 [pid 6341] +++ exited with 0 +++ [pid 6337] +++ exited with 0 +++ [pid 5068] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6348] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6337, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6348] <... mprotect resumed>) = 0 [pid 5070] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 6348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6344] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 5066] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6344] <... futex resumed>) = 1 [pid 6343] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6343] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] newfstatat(3, "", [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] newfstatat(AT_FDCWD, "./70/bus", ./strace-static-x86_64: Process 6349 attached [pid 6344] creat("./bus", 000 [pid 6343] <... futex resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6349] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6348] <... clone3 resumed> => {parent_tid=[6349]}, 88) = 6349 [pid 6344] <... creat resumed>) = 4 [pid 6343] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(3, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6349] <... rseq resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6349] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6344] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... set_robust_list resumed>) = 0 [pid 6344] <... futex resumed>) = 1 [pid 6343] <... futex resumed>) = 0 [pid 6349] rt_sigprocmask(SIG_SETMASK, [], [pid 6344] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6343] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6343] <... futex resumed>) = 0 [pid 6349] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6343] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6348] rt_sigprocmask(SIG_SETMASK, [], [ 138.302948][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 138.340735][ T47] hfsplus: b-tree write err: -5, ino 4 [ 138.347590][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 5066] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6350 attached [pid 6348] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./70/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] <... futex resumed>) = 1 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6350 [pid 6349] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6348] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] newfstatat(4, "", [pid 6350] set_robust_list(0x555555fbc6a0, 24 [pid 6349] memfd_create("syzkaller", 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6350] <... set_robust_list resumed>) = 0 [pid 6349] <... memfd_create resumed>) = 3 [pid 5066] getdents64(4, [pid 6350] chdir("./71" [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6350] <... chdir resumed>) = 0 [pid 5066] getdents64(4, [pid 6350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6350] <... prctl resumed>) = 0 [pid 5066] close(4 [pid 6350] setpgid(0, 0 [pid 6349] <... write resumed>) = 524288 [pid 6343] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... close resumed>) = 0 [pid 6350] <... setpgid resumed>) = 0 [pid 6343] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [ 138.352073][ T6344] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.367005][ T6344] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.375264][ T6344] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.383770][ T6344] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] rmdir("./70/bus" [pid 6350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6343] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 6350] <... openat resumed>) = 3 [pid 6349] munmap(0x7efd74b1c000, 138412032 [pid 6344] <... write resumed>) = 57344 [pid 6343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6350] write(3, "1000", 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] <... write resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6350] close(3 [pid 5066] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6350] <... close resumed>) = 0 [pid 6344] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6343] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6350] symlink("/dev/binderfs", "./binderfs" [pid 6344] <... futex resumed>) = 0 [pid 6343] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] unlink("./70/binderfs" [pid 6350] <... symlink resumed>) = 0 [pid 6349] <... munmap resumed>) = 0 [pid 6344] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] newfstatat(AT_FDCWD, "./70/bus", [pid 5067] newfstatat(AT_FDCWD, "./68/bus", [pid 6350] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6343] <... mprotect resumed>) = 0 [pid 5067] umount2("./68/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6343] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6350] <... futex resumed>) = 0 [pid 6349] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6343] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(3, [pid 6350] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6350] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 6350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6349] <... openat resumed>) = 4 [pid 6350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./68/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 138.402724][ T6344] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.419283][ T6344] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6349] <... ioctl resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./70/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(4, [pid 5066] rmdir("./70" [pid 6350] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6350] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6343] <... clone3 resumed> => {parent_tid=[6351]}, 88) = 6351 [pid 5066] <... rmdir resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 6343] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6343] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6351 attached [pid 6350] <... mprotect resumed>) = 0 [pid 6343] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(4, [pid 5066] mkdir("./71", 0777 [pid 5070] getdents64(4, [pid 6351] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6343] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6351] <... rseq resumed>) = 0 [pid 5067] close(4 [pid 6351] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5067] <... close resumed>) = 0 [pid 6351] <... set_robust_list resumed>) = 0 [pid 5067] rmdir("./68/bus" [pid 5066] <... mkdir resumed>) = 0 [pid 6343] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6351] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 6351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6351] creat("./file1", 000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5070] close(4 [pid 6351] <... creat resumed>) = 5 [pid 5070] <... close resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./68/binderfs", [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6351] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] rmdir("./70/bus" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6351] <... futex resumed>) = 1 [pid 5067] unlink("./68/binderfs" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6351] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6343] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] close(3 [pid 6343] exit_group(0 [pid 5070] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 6351] <... futex resumed>) = ? [pid 6344] <... futex resumed>) = ? [pid 6343] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 6351] +++ exited with 0 +++ [pid 6350] <... clone3 resumed> => {parent_tid=[6352]}, 88) = 6352 [pid 6344] +++ exited with 0 +++ [pid 5067] close(3./strace-static-x86_64: Process 6352 attached ) = 0 [pid 6352] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5067] rmdir("./68" [pid 6350] rt_sigprocmask(SIG_SETMASK, [], [pid 6349] close(3 [pid 6343] +++ exited with 0 +++ [pid 5070] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6343, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 6353 attached [pid 6352] <... rseq resumed>) = 0 [pid 6350] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] mkdir("./bus", 0777 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6353] set_robust_list(0x555555fbc6a0, 24 [pid 6350] <... futex resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6353 [pid 6353] <... set_robust_list resumed>) = 0 [pid 6352] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6350] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] unlink("./70/binderfs" [pid 6349] <... mkdir resumed>) = 0 [pid 6349] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6352] <... set_robust_list resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5067] mkdir("./69", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] chdir("./71" [pid 6352] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6353] <... chdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] close(3 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 6353] <... prctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 6353] setpgid(0, 0) = 0 [pid 6352] memfd_create("syzkaller", 0 [pid 5070] rmdir("./70" [pid 5067] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6352] <... memfd_create resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] getdents64(3, [pid 6352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... rmdir resumed>) = 0 [pid 6352] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] mkdir("./71", 0777 [pid 5067] close(3 [pid 6352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [ 138.454319][ T6349] loop4: detected capacity change from 0 to 1024 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6353] <... openat resumed>) = 3 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6353] write(3, "1000", 4./strace-static-x86_64: Process 6354 attached ) = 4 [pid 5070] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6354 [pid 6354] set_robust_list(0x555555fbc6a0, 24 [pid 6353] close(3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6354] <... set_robust_list resumed>) = 0 [pid 6352] <... write resumed>) = 524288 [pid 6349] <... mount resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6354] chdir("./69") = 0 [pid 6354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6354] setpgid(0, 0) = 0 [pid 6354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6354] write(3, "1000", 4) = 4 [pid 6353] <... close resumed>) = 0 [pid 6354] close(3 [pid 6353] symlink("/dev/binderfs", "./binderfs" [pid 6354] <... close resumed>) = 0 [pid 6354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6354] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... symlink resumed>) = 0 [pid 6349] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6354] <... futex resumed>) = 0 [pid 6349] <... openat resumed>) = 3 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6355 [pid 6354] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 6355 attached NULL, 8) = 0 [pid 6355] set_robust_list(0x555555fbc6a0, 24 [pid 6354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6349] chdir("./bus" [pid 6355] <... set_robust_list resumed>) = 0 [pid 6354] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6352] munmap(0x7efd74b1c000, 138412032 [pid 6349] <... chdir resumed>) = 0 [pid 6355] chdir("./71" [pid 6354] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6353] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... chdir resumed>) = 0 [pid 6354] <... mprotect resumed>) = 0 [pid 6353] <... futex resumed>) = 0 [pid 6352] <... munmap resumed>) = 0 [pid 6349] ioctl(4, LOOP_CLR_FD [pid 6353] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6354] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6353] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6349] <... ioctl resumed>) = 0 [pid 6355] <... prctl resumed>) = 0 [pid 6354] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6352] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6349] close(4 [pid 6355] setpgid(0, 0 [pid 6354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6352] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6356 attached [pid 6355] <... setpgid resumed>) = 0 [pid 6349] <... close resumed>) = 0 [pid 6356] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6354] <... clone3 resumed> => {parent_tid=[6356]}, 88) = 6356 [pid 6352] ioctl(4, LOOP_SET_FD, 3 [pid 6349] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... rseq resumed>) = 0 [pid 6354] rt_sigprocmask(SIG_SETMASK, [], [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6349] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [ 138.518492][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6348] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... openat resumed>) = 3 [pid 6348] <... futex resumed>) = 0 [pid 6348] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6356] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6355] write(3, "1000", 4 [pid 6353] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6349] creat("./bus", 000 [pid 6353] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6356] <... set_robust_list resumed>) = 0 [pid 6355] <... write resumed>) = 4 [pid 6354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6356] rt_sigprocmask(SIG_SETMASK, [], [pid 6355] close(3 [pid 6354] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6355] <... close resumed>) = 0 [pid 6354] <... futex resumed>) = 0 [pid 6353] <... mprotect resumed>) = 0 [pid 6349] <... creat resumed>) = 4 [pid 6356] memfd_create("syzkaller", 0 [pid 6355] symlink("/dev/binderfs", "./binderfs" [pid 6354] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6356] <... memfd_create resumed>) = 3 [pid 6355] <... symlink resumed>) = 0 [pid 6353] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6349] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6349] <... futex resumed>) = 1 [pid 6356] <... mmap resumed>) = 0x7efd74b1c000 [pid 6355] <... futex resumed>) = 0 [pid 6353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6349] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6355] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6348] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6357 attached [pid 6355] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6353] <... clone3 resumed> => {parent_tid=[6357]}, 88) = 6357 [pid 6348] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6357] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6353] rt_sigprocmask(SIG_SETMASK, [], [pid 6348] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6357] <... rseq resumed>) = 0 [pid 6353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6357] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5065] <... umount2 resumed>) = 0 [pid 6357] <... set_robust_list resumed>) = 0 [pid 6355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6353] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... ioctl resumed>) = 0 [pid 6349] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5065] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] rt_sigprocmask(SIG_SETMASK, [], [pid 6355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6353] <... futex resumed>) = 0 [pid 6352] close(3 [pid 6357] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6353] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6352] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] memfd_create("syzkaller", 0 [pid 6356] <... write resumed>) = 524288 [pid 6355] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] newfstatat(AT_FDCWD, "./69/bus", [ 138.567861][ T6352] loop3: detected capacity change from 0 to 1024 [pid 6357] <... memfd_create resumed>) = 3 [pid 6352] mkdir("./bus", 0777 [pid 6357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6355] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6357] <... mmap resumed>) = 0x7efd74b1c000 [pid 5065] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6356] munmap(0x7efd74b1c000, 138412032 [pid 6355] <... mprotect resumed>) = 0 [pid 6352] <... mkdir resumed>) = 0 [pid 6355] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6352] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./69/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6355] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 6355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6358 attached [pid 5065] getdents64(4, [pid 6357] <... write resumed>) = 524288 [pid 6356] <... munmap resumed>) = 0 [pid 6358] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6355] <... clone3 resumed> => {parent_tid=[6358]}, 88) = 6358 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6358] <... rseq resumed>) = 0 [pid 6355] rt_sigprocmask(SIG_SETMASK, [], [pid 6358] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] getdents64(4, [pid 6358] <... set_robust_list resumed>) = 0 [pid 6356] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6355] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] rt_sigprocmask(SIG_SETMASK, [], [pid 6356] <... openat resumed>) = 4 [pid 6355] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6356] ioctl(4, LOOP_SET_FD, 3 [pid 6355] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] close(4 [pid 6358] memfd_create("syzkaller", 0 [pid 6352] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6357] munmap(0x7efd74b1c000, 138412032 [pid 6352] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] rmdir("./69/bus" [pid 6352] <... openat resumed>) = 3 [pid 6348] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] chdir("./bus" [pid 6348] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6352] <... chdir resumed>) = 0 [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6352] ioctl(4, LOOP_CLR_FD [pid 6348] <... mmap resumed>) = 0x7efd7cefb000 [pid 6352] <... ioctl resumed>) = 0 [pid 6348] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6357] <... munmap resumed>) = 0 [pid 6352] close(4 [pid 6348] <... mprotect resumed>) = 0 [pid 5065] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6357] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6352] <... close resumed>) = 0 [pid 6348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6357] <... openat resumed>) = 4 [pid 6352] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6357] ioctl(4, LOOP_SET_FD, 3 [pid 6352] <... futex resumed>) = 1 [pid 6350] <... futex resumed>) = 0 [pid 6348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6358] <... memfd_create resumed>) = 3 [pid 6352] creat("./bus", 000 [pid 6350] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... ioctl resumed>) = 0 [ 138.614120][ T6349] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.645874][ T6349] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.646207][ T6356] loop2: detected capacity change from 0 to 1024 [pid 5065] newfstatat(AT_FDCWD, "./69/binderfs", [pid 6358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6356] close(3 [pid 6352] <... creat resumed>) = 4 [pid 6350] <... futex resumed>) = 0 [pid 6348] <... clone3 resumed> => {parent_tid=[6359]}, 88) = 6359 [pid 6358] <... mmap resumed>) = 0x7efd74b1c000 [pid 6356] <... close resumed>) = 0 [pid 6352] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6359 attached [pid 6352] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] rt_sigprocmask(SIG_SETMASK, [], [pid 6359] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6352] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6350] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] unlink("./69/binderfs" [pid 6359] <... rseq resumed>) = 0 [pid 6358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6356] mkdir("./bus", 0777 [pid 6350] <... futex resumed>) = 0 [pid 6348] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... unlink resumed>) = 0 [pid 6359] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6356] <... mkdir resumed>) = 0 [pid 6350] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6348] <... futex resumed>) = 0 [pid 6358] <... write resumed>) = 524288 [pid 6357] <... ioctl resumed>) = 0 [pid 6357] close(3) = 0 [pid 6357] mkdir("./bus", 0777 [pid 6358] munmap(0x7efd74b1c000, 138412032 [pid 6357] <... mkdir resumed>) = 0 [pid 6356] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6359] <... set_robust_list resumed>) = 0 [pid 6348] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6357] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6358] <... munmap resumed>) = 0 [pid 6359] creat("./file1", 000 [pid 5065] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [ 138.663408][ T6357] loop1: detected capacity change from 0 to 1024 [ 138.681813][ T6352] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.689147][ T6352] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.697109][ T6349] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] rmdir("./69" [pid 6358] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 6358] ioctl(4, LOOP_SET_FD, 3 [pid 5065] mkdir("./70", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6356] <... mount resumed>) = 0 [pid 6356] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6360 [pid 6356] chdir("./bus"./strace-static-x86_64: Process 6360 attached ) = 0 [pid 6356] ioctl(4, LOOP_CLR_FD [pid 6360] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6360] chdir("./70") = 0 [pid 6356] <... ioctl resumed>) = 0 [pid 6360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6356] close(4 [pid 6360] <... prctl resumed>) = 0 [pid 6356] <... close resumed>) = 0 [pid 6360] setpgid(0, 0 [pid 6357] <... mount resumed>) = 0 [pid 6356] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6360] <... setpgid resumed>) = 0 [pid 6357] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6356] <... futex resumed>) = 1 [pid 6354] <... futex resumed>) = 0 [pid 6360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6357] <... openat resumed>) = 3 [pid 6356] creat("./bus", 000 [pid 6354] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6360] <... openat resumed>) = 3 [pid 6357] chdir("./bus" [pid 6354] <... futex resumed>) = 0 [pid 6360] write(3, "1000", 4 [pid 6358] <... ioctl resumed>) = 0 [pid 6356] <... creat resumed>) = 4 [pid 6350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6360] <... write resumed>) = 4 [pid 6357] <... chdir resumed>) = 0 [pid 6350] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6358] close(3 [pid 6357] ioctl(4, LOOP_CLR_FD [pid 6356] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] <... futex resumed>) = 0 [pid 6358] <... close resumed>) = 0 [pid 6357] <... ioctl resumed>) = 0 [pid 6356] <... futex resumed>) = 0 [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6360] close(3 [pid 6358] mkdir("./bus", 0777 [pid 6357] close(4 [pid 6360] <... close resumed>) = 0 [pid 6357] <... close resumed>) = 0 [pid 6356] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6354] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... mmap resumed>) = 0x7efd7cefb000 [pid 6360] symlink("/dev/binderfs", "./binderfs" [pid 6357] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6354] <... futex resumed>) = 0 [pid 6360] <... symlink resumed>) = 0 [pid 6359] <... creat resumed>) = 5 [pid 6357] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 0 [pid 6350] <... mprotect resumed>) = 0 [pid 6360] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6359] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... mkdir resumed>) = 0 [ 138.717740][ T6358] loop5: detected capacity change from 0 to 1024 [ 138.722431][ T6349] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.751798][ T6352] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6357] creat("./bus", 000 [pid 6354] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6360] <... futex resumed>) = 0 [pid 6359] <... futex resumed>) = 0 [pid 6357] <... creat resumed>) = 4 [pid 6353] <... futex resumed>) = 0 [pid 6350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6360] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6358] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6360] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6360] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6359] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6361 attached [pid 6360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6361] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6357] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... clone3 resumed> => {parent_tid=[6361]}, 88) = 6361 [pid 6350] rt_sigprocmask(SIG_SETMASK, [], [pid 6361] <... rseq resumed>) = 0 [pid 6360] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6357] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 0 [pid 6350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6360] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6357] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6353] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 0 [ 138.776728][ T6356] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.783228][ T6349] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.795898][ T6352] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.817395][ T6357] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6353] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6361] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6360] <... mprotect resumed>) = 0 [pid 6358] <... mount resumed>) = 0 [pid 6361] <... set_robust_list resumed>) = 0 [pid 6360] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6361] rt_sigprocmask(SIG_SETMASK, [], [pid 6360] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6361] creat("./file1", 000 [pid 6354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6358] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6360] <... clone3 resumed> => {parent_tid=[6362]}, 88) = 6362 [pid 6360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6360] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6362 attached ) = 0 [pid 6358] <... openat resumed>) = 3 [pid 6354] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6360] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6358] chdir("./bus" [pid 6354] <... futex resumed>) = 0 [pid 6354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6358] <... chdir resumed>) = 0 [pid 6362] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6361] <... creat resumed>) = 5 [pid 6358] ioctl(4, LOOP_CLR_FD [pid 6354] <... mmap resumed>) = 0x7efd7cefb000 [pid 6362] <... rseq resumed>) = 0 [pid 6361] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... ioctl resumed>) = 0 [pid 6354] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6362] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6361] <... futex resumed>) = 1 [pid 6362] <... set_robust_list resumed>) = 0 [pid 6361] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6358] close(4 [pid 6354] <... mprotect resumed>) = 0 [pid 6353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6350] <... futex resumed>) = 0 [pid 6353] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6353] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6353] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6362] memfd_create("syzkaller", 0 [pid 6358] <... close resumed>) = 0 [pid 6354] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6349] <... write resumed>) = 57344 [pid 6358] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6349] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6358] <... futex resumed>) = 1 [pid 6355] <... futex resumed>) = 0 [pid 6354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6349] <... futex resumed>) = 0 [ 138.821078][ T6356] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.832833][ T6349] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.856971][ T6352] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.861569][ T6356] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6364 attached ./strace-static-x86_64: Process 6363 attached [pid 6362] <... memfd_create resumed>) = 3 [pid 6358] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6355] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... clone3 resumed> => {parent_tid=[6363]}, 88) = 6363 [pid 6349] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6364] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6363] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6355] <... futex resumed>) = 0 [pid 6354] <... clone3 resumed> => {parent_tid=[6364]}, 88) = 6364 [pid 6353] rt_sigprocmask(SIG_SETMASK, [], [pid 6348] exit_group(0 [pid 6364] <... rseq resumed>) = 0 [pid 6358] creat("./bus", 000 [pid 6355] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6354] rt_sigprocmask(SIG_SETMASK, [], [pid 6363] <... rseq resumed>) = 0 [pid 6362] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6359] <... futex resumed>) = ? [pid 6354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6349] <... futex resumed>) = ? [pid 6348] <... exit_group resumed>) = ? [pid 6358] <... creat resumed>) = 4 [pid 6354] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] +++ exited with 0 +++ [pid 6363] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6362] <... mmap resumed>) = 0x7efd74b1c000 [pid 6359] +++ exited with 0 +++ [pid 6358] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... futex resumed>) = 0 [pid 6353] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] +++ exited with 0 +++ [ 138.868442][ T6357] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.888551][ T6356] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.892486][ T6357] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.915003][ T6352] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6364] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6363] <... set_robust_list resumed>) = 0 [pid 6362] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6358] <... futex resumed>) = 1 [pid 6355] <... futex resumed>) = 0 [pid 6354] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6355] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 6355] <... futex resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 6355] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6363] rt_sigprocmask(SIG_SETMASK, [], [pid 6353] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6364] <... set_robust_list resumed>) = 0 [pid 6358] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6364] rt_sigprocmask(SIG_SETMASK, [], [pid 6363] creat("./file1", 000 [pid 5069] <... openat resumed>) = 3 [pid 6364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6362] <... write resumed>) = 524288 [pid 6364] creat("./file1", 000 [pid 5069] newfstatat(3, "", [pid 6352] <... write resumed>) = 57344 [pid 6352] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] exit_group(0 [pid 6361] <... futex resumed>) = ? [pid 6352] <... futex resumed>) = ? [pid 6350] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6361] +++ exited with 0 +++ [pid 6352] +++ exited with 0 +++ [pid 6350] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6350, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5069] getdents64(3, [pid 6362] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6362] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6362] ioctl(4, LOOP_SET_FD, 3 [pid 6363] <... creat resumed>) = 5 [pid 6362] <... ioctl resumed>) = 0 [pid 6353] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6363] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] close(3 [pid 5069] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] <... futex resumed>) = 0 [pid 6362] <... close resumed>) = 0 [pid 5068] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6363] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] mkdir("./bus", 0777) = 0 [pid 6362] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6354] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 138.932144][ T6356] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.947055][ T6357] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.951878][ T6358] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.957544][ T6362] loop0: detected capacity change from 0 to 1024 [ 138.962628][ T6356] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6355] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6356] <... write resumed>) = 57344 [pid 6355] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 6356] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6356] <... futex resumed>) = 0 [pid 6364] <... creat resumed>) = 5 [pid 6356] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6355] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] getdents64(3, [pid 6355] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6362] <... mount resumed>) = 0 [pid 6355] <... mprotect resumed>) = 0 [pid 6362] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6355] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6362] <... openat resumed>) = 3 [pid 6355] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6362] chdir("./bus") = 0 [pid 6355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6362] ioctl(4, LOOP_CLR_FD [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6364] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] <... ioctl resumed>) = 0 [pid 6354] exit_group(0./strace-static-x86_64: Process 6365 attached [pid 6364] <... futex resumed>) = 0 [pid 6362] close(4 [pid 5068] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6362] <... close resumed>) = 0 [pid 6355] <... clone3 resumed> => {parent_tid=[6365]}, 88) = 6365 [pid 6354] <... exit_group resumed>) = ? [pid 6365] <... rseq resumed>) = 0 [pid 6362] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] rt_sigprocmask(SIG_SETMASK, [], [pid 6365] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6362] <... futex resumed>) = 1 [pid 6360] <... futex resumed>) = 0 [pid 6355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6365] <... set_robust_list resumed>) = 0 [pid 6362] creat("./bus", 000 [pid 6360] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6356] <... futex resumed>) = ? [pid 6365] rt_sigprocmask(SIG_SETMASK, [], [pid 6364] +++ exited with 0 +++ [pid 6355] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6362] <... creat resumed>) = 4 [pid 6360] <... futex resumed>) = 0 [pid 6355] <... futex resumed>) = 0 [pid 6365] creat("./file1", 000 [pid 6362] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6360] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6355] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] <... futex resumed>) = 0 [pid 6360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6356] +++ exited with 0 +++ [pid 6354] +++ exited with 0 +++ [pid 6362] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6360] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 138.982777][ T47] hfsplus: b-tree write err: -5, ino 4 [ 138.989197][ T6358] hfsplus: request for non-existent node 16715520 in B*Tree [ 138.990063][ T6357] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.009462][ T6358] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6360] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6354, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 139.028680][ T58] hfsplus: b-tree write err: -5, ino 4 [ 139.046964][ T6362] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.056875][ T6358] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.061912][ T6357] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] <... umount2 resumed>) = 0 [pid 5068] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 6355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6360] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6360] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6360] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6366]}, 88) = 6366 [pid 6360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6360] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6360] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6366 attached [pid 6366] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6366] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6366] creat("./file1", 000 [pid 5069] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./71/bus", [pid 5067] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./70/bus", [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6365] <... creat resumed>) = 5 [pid 6357] <... write resumed>) = 57344 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6365] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./71/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6365] <... futex resumed>) = 0 [pid 6365] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6357] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 6357] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./70/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(4, "", [pid 6357] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... openat resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6353] exit_group(0 [pid 6363] <... futex resumed>) = ? [pid 6357] <... futex resumed>) = ? [pid 6353] <... exit_group resumed>) = ? [pid 5069] newfstatat(4, "", [pid 5068] getdents64(4, [pid 6363] +++ exited with 0 +++ [pid 6357] +++ exited with 0 +++ [pid 6353] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] <... umount2 resumed>) = 0 [pid 5069] getdents64(4, [pid 5068] getdents64(4, [pid 6360] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6353, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(4, [pid 5066] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(4 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5069] close(4 [pid 5068] rmdir("./71/bus" [pid 5066] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./70/bus" [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [ 139.078670][ T6362] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.083789][ T6358] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.104685][ T47] hfsplus: b-tree write err: -5, ino 4 [ 139.105100][ T6362] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.123330][ T6358] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6358] <... write resumed>) = 57344 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 6358] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] exit_group(0 [pid 5069] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6365] <... futex resumed>) = ? [pid 6358] <... futex resumed>) = ? [pid 6355] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./69/bus", [pid 5066] getdents64(3, [pid 6365] +++ exited with 0 +++ [pid 6358] +++ exited with 0 +++ [pid 6355] +++ exited with 0 +++ [pid 5069] newfstatat(AT_FDCWD, "./70/binderfs", [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6355, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./71/binderfs" [pid 5067] umount2("./69/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] unlink("./70/binderfs") = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6366] <... creat resumed>) = 5 [pid 6366] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6366] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] openat(AT_FDCWD, "./69/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 4 [pid 5070] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] close(3) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5069] rmdir("./70" [pid 5070] newfstatat(3, "", [pid 5067] newfstatat(4, "", [pid 5068] <... unlink resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5070] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] mkdir("./71", 0777 [pid 5068] getdents64(3, [pid 5070] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(4, [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(4, [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5068] close(3 [pid 5067] close(4 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5069] close(3 [pid 5068] rmdir("./71" [pid 5067] rmdir("./69/bus" [pid 5069] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] mkdir("./72", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6367 [ 139.176221][ T6362] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.187650][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 139.212095][ T58] hfsplus: b-tree write err: -5, ino 4 [ 139.218861][ T6362] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] newfstatat(AT_FDCWD, "./69/binderfs", ./strace-static-x86_64: Process 6367 attached [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6367] set_robust_list(0x555555fbc6a0, 24 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] unlink("./69/binderfs" [pid 6367] <... set_robust_list resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 6367] chdir("./71" [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6367] <... chdir resumed>) = 0 [pid 5068] close(3 [pid 5067] close(3 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./69" [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6368 attached [pid 5067] mkdir("./70", 0777 [pid 6368] set_robust_list(0x555555fbc6a0, 24 [pid 5070] <... umount2 resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6368] <... set_robust_list resumed>) = 0 [pid 6367] <... prctl resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6368 [pid 5066] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6368] chdir("./72" [pid 6367] setpgid(0, 0 [pid 5070] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6367] <... setpgid resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] newfstatat(AT_FDCWD, "./71/bus", [pid 5067] <... openat resumed>) = 3 [pid 6368] <... chdir resumed>) = 0 [pid 6367] <... openat resumed>) = 3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] newfstatat(AT_FDCWD, "./71/bus", [pid 6368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6367] write(3, "1000", 4 [pid 5070] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6368] <... prctl resumed>) = 0 [pid 6367] <... write resumed>) = 4 [pid 5067] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6368] setpgid(0, 0 [pid 6367] close(3 [pid 6362] <... write resumed>) = 57344 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6362] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] openat(AT_FDCWD, "./71/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6362] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 6362] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6360] exit_group(0 [pid 5070] newfstatat(4, "", [pid 6366] <... futex resumed>) = ? [pid 6362] <... futex resumed>) = ? [pid 6360] <... exit_group resumed>) = ? [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6368] <... setpgid resumed>) = 0 [pid 6367] <... close resumed>) = 0 [pid 6366] +++ exited with 0 +++ [pid 6362] +++ exited with 0 +++ [pid 6360] +++ exited with 0 +++ [pid 5066] openat(AT_FDCWD, "./71/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6369 attached [pid 6368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6367] symlink("/dev/binderfs", "./binderfs" [pid 5070] getdents64(4, [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6369 [pid 5066] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6360, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [ 139.244531][ T6362] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] newfstatat(4, "", [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, [pid 5066] getdents64(4, [pid 5065] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] close(4 [pid 5065] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6367] <... symlink resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 3 [pid 6369] set_robust_list(0x555555fbc6a0, 24 [pid 6368] <... openat resumed>) = 3 [pid 6367] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./71/bus" [pid 5066] getdents64(4, [pid 5065] newfstatat(3, "", [pid 6368] write(3, "1000", 4 [pid 6367] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6367] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] close(4 [pid 6368] <... write resumed>) = 4 [pid 6367] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6368] close(3 [pid 5066] <... close resumed>) = 0 [pid 6368] <... close resumed>) = 0 [pid 5066] rmdir("./71/bus" [pid 6369] <... set_robust_list resumed>) = 0 [pid 6368] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6369] chdir("./70" [pid 5070] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 6369] <... chdir resumed>) = 0 [pid 6368] <... symlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6368] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5066] newfstatat(AT_FDCWD, "./71/binderfs", [pid 5065] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6368] <... futex resumed>) = 0 [pid 6367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6369] <... prctl resumed>) = 0 [pid 6367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./71/binderfs" [pid 6368] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6367] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] getdents64(3, [pid 5066] unlink("./71/binderfs" [pid 6368] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6367] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6369] setpgid(0, 0 [pid 6367] <... mprotect resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6369] <... setpgid resumed>) = 0 [pid 5070] close(3 [pid 5066] <... unlink resumed>) = 0 [pid 6369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6367] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 6369] <... openat resumed>) = 3 [pid 6368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6367] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] rmdir("./71" [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] close(3 [pid 6368] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6369] write(3, "1000", 4 [pid 6368] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6369] <... write resumed>) = 4 [pid 6368] <... mprotect resumed>) = 0 [pid 5070] mkdir("./72", 0777 [pid 5066] rmdir("./71" [pid 6369] close(3 [pid 5070] <... mkdir resumed>) = 0 [pid 6367] <... clone3 resumed> => {parent_tid=[6370]}, 88) = 6370 [pid 5066] <... rmdir resumed>) = 0 [pid 6367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] mkdir("./72", 0777 [pid 6367] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6370 attached [pid 6369] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6370] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6369] symlink("/dev/binderfs", "./binderfs" [pid 6367] <... futex resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6370] <... rseq resumed>) = 0 [pid 6369] <... symlink resumed>) = 0 [pid 6367] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5066] <... mkdir resumed>) = 0 [pid 6370] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6369] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6370] <... set_robust_list resumed>) = 0 [pid 6369] <... futex resumed>) = 0 [pid 6368] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] close(3 [pid 6370] rt_sigprocmask(SIG_SETMASK, [], [pid 6369] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] <... close resumed>) = 0 [pid 6370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6369] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6371 attached [pid 6370] memfd_create("syzkaller", 0 [pid 6369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6371] set_robust_list(0x555555fbc6a0, 24 [pid 6370] <... memfd_create resumed>) = 3 [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6371 [pid 6370] <... mmap resumed>) = 0x7efd74b1c000 [pid 6369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6369] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6368] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6371] <... set_robust_list resumed>) = 0 [pid 6371] chdir("./72" [pid 6369] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6371] <... chdir resumed>) = 0 [pid 6369] <... mprotect resumed>) = 0 [pid 6369] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... openat resumed>) = 3 [pid 6368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6371] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6369] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6371] <... prctl resumed>) = 0 [pid 6369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] close(3./strace-static-x86_64: Process 6373 attached ./strace-static-x86_64: Process 6372 attached [pid 6371] setpgid(0, 0 [pid 5066] <... close resumed>) = 0 [pid 6373] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6372] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6371] <... setpgid resumed>) = 0 [pid 6369] <... clone3 resumed> => {parent_tid=[6373]}, 88) = 6373 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6373] <... rseq resumed>) = 0 [pid 6372] <... rseq resumed>) = 0 [pid 6371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6368] <... clone3 resumed> => {parent_tid=[6372]}, 88) = 6372 [pid 6371] <... openat resumed>) = 3 [pid 6369] rt_sigprocmask(SIG_SETMASK, [], [pid 6373] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6372] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6371] write(3, "1000", 4 [pid 6369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6374 ./strace-static-x86_64: Process 6374 attached [pid 6373] <... set_robust_list resumed>) = 0 [pid 6372] <... set_robust_list resumed>) = 0 [pid 6371] <... write resumed>) = 4 [pid 6369] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = 0 [pid 6368] <... futex resumed>) = 0 [pid 6374] set_robust_list(0x555555fbc6a0, 24 [pid 6373] rt_sigprocmask(SIG_SETMASK, [], [pid 6372] rt_sigprocmask(SIG_SETMASK, [], [pid 6371] close(3 [pid 6369] <... futex resumed>) = 0 [pid 6368] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6371] <... close resumed>) = 0 [pid 6369] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6374] <... set_robust_list resumed>) = 0 [pid 6373] memfd_create("syzkaller", 0 [pid 6372] memfd_create("syzkaller", 0 [pid 6371] symlink("/dev/binderfs", "./binderfs" [pid 6374] chdir("./72" [pid 6373] <... memfd_create resumed>) = 3 [pid 6372] <... memfd_create resumed>) = 3 [pid 6371] <... symlink resumed>) = 0 [pid 6370] <... write resumed>) = 524288 [pid 5065] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] <... chdir resumed>) = 0 [pid 6374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 139.342816][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6371] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] <... mmap resumed>) = 0x7efd74b1c000 [pid 6372] <... mmap resumed>) = 0x7efd74b1c000 [pid 6371] <... futex resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./70/bus", [pid 6374] <... prctl resumed>) = 0 [pid 6373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6371] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6370] munmap(0x7efd74b1c000, 138412032 [pid 6374] setpgid(0, 0 [pid 6371] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6370] <... munmap resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6374] <... setpgid resumed>) = 0 [pid 6371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6370] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] openat(AT_FDCWD, "./70/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6370] <... openat resumed>) = 4 [pid 6371] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... openat resumed>) = 4 [pid 6374] <... openat resumed>) = 3 [pid 6371] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6374] write(3, "1000", 4 [pid 5065] newfstatat(4, "", [pid 6374] <... write resumed>) = 4 [pid 6373] <... write resumed>) = 524288 [pid 6371] <... mprotect resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6374] close(3 [pid 5065] getdents64(4, [pid 6374] <... close resumed>) = 0 [pid 6371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6374] symlink("/dev/binderfs", "./binderfs" [pid 5065] getdents64(4, [pid 6374] <... symlink resumed>) = 0 [pid 6373] munmap(0x7efd74b1c000, 138412032 [pid 6371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] close(4) = 0 [pid 6371] <... clone3 resumed> => {parent_tid=[6375]}, 88) = 6375 [pid 5065] rmdir("./70/bus" [pid 6371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6371] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6371] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] <... rmdir resumed>) = 0 [pid 6373] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6375 attached [pid 6372] <... write resumed>) = 524288 [pid 5065] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6375] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6372] munmap(0x7efd74b1c000, 138412032 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6375] <... rseq resumed>) = 0 [pid 6374] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6372] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./70/binderfs", [pid 6375] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6374] <... futex resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6374] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] unlink("./70/binderfs" [pid 6374] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6373] <... openat resumed>) = 4 [pid 6375] <... set_robust_list resumed>) = 0 [pid 6372] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6370] <... ioctl resumed>) = 0 [pid 6375] rt_sigprocmask(SIG_SETMASK, [], [pid 6373] ioctl(4, LOOP_SET_FD, 3 [pid 6372] <... openat resumed>) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 6375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6375] memfd_create("syzkaller", 0 [pid 6372] ioctl(4, LOOP_SET_FD, 3 [pid 6375] <... memfd_create resumed>) = 3 [pid 6374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] getdents64(3, [pid 6374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6373] <... ioctl resumed>) = 0 [pid 6374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6373] close(3 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6374] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] close(3 [pid 6374] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6373] <... close resumed>) = 0 [pid 6370] close(3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./70" [pid 6374] <... mprotect resumed>) = 0 [ 139.436125][ T6370] loop4: detected capacity change from 0 to 1024 [ 139.473969][ T6373] loop2: detected capacity change from 0 to 1024 [pid 6373] mkdir("./bus", 0777 [pid 6375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6373] <... mkdir resumed>) = 0 [pid 6370] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6373] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6375] <... mmap resumed>) = 0x7efd74b1c000 [pid 6370] mkdir("./bus", 0777) = 0 [pid 5065] mkdir("./71", 0777 [pid 6370] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... mkdir resumed>) = 0 [pid 6375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6376 attached [pid 6376] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6374] <... clone3 resumed> => {parent_tid=[6376]}, 88) = 6376 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6374] rt_sigprocmask(SIG_SETMASK, [], [pid 6376] <... rseq resumed>) = 0 [pid 6374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6373] <... mount resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6376] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6374] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6372] <... ioctl resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6370] <... mount resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6370] chdir("./bus") = 0 [pid 6370] ioctl(4, LOOP_CLR_FD) = 0 [pid 6370] close(4) = 0 [pid 6370] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6367] <... futex resumed>) = 0 [pid 6370] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6367] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6367] <... futex resumed>) = 0 [pid 6370] creat("./bus", 000 [pid 6367] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... creat resumed>) = 4 [pid 6370] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6367] <... futex resumed>) = 0 [pid 6370] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6367] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6367] <... futex resumed>) = 0 [pid 6370] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6367] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6376] <... set_robust_list resumed>) = 0 [pid 6373] <... openat resumed>) = 3 [pid 6374] <... futex resumed>) = 0 [pid 6372] close(3) = 0 [pid 6374] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6372] mkdir("./bus", 0777) = 0 [ 139.474896][ T6372] loop3: detected capacity change from 0 to 1024 [pid 6376] rt_sigprocmask(SIG_SETMASK, [], [pid 6373] chdir("./bus" [pid 6376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6375] <... write resumed>) = 524288 [pid 6373] <... chdir resumed>) = 0 [pid 6372] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 6376] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 6376] <... memfd_create resumed>) = 3 [pid 6375] munmap(0x7efd74b1c000, 138412032 [pid 6373] ioctl(4, LOOP_CLR_FD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6373] <... ioctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6377 ./strace-static-x86_64: Process 6377 attached [pid 6377] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6375] <... munmap resumed>) = 0 [pid 6373] close(4 [pid 6377] chdir("./71" [pid 6373] <... close resumed>) = 0 [pid 6377] <... chdir resumed>) = 0 [pid 6376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6375] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6373] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... mount resumed>) = 0 [pid 6372] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6372] <... openat resumed>) = 3 [pid 6377] <... prctl resumed>) = 0 [pid 6372] chdir("./bus" [pid 6377] setpgid(0, 0 [pid 6372] <... chdir resumed>) = 0 [pid 6372] ioctl(4, LOOP_CLR_FD) = 0 [pid 6377] <... setpgid resumed>) = 0 [pid 6372] close(4 [pid 6377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6372] <... close resumed>) = 0 [pid 6376] <... mmap resumed>) = 0x7efd74b1c000 [pid 6375] <... openat resumed>) = 4 [pid 6373] <... futex resumed>) = 1 [pid 6369] <... futex resumed>) = 0 [pid 6367] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6369] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = 0 [pid 6369] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] <... futex resumed>) = 0 [pid 6367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6377] <... openat resumed>) = 3 [pid 6372] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... mmap resumed>) = 0x7efd7cefb000 [pid 6372] <... futex resumed>) = 1 [pid 6367] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6373] creat("./bus", 000 [pid 6367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6378]}, 88) = 6378 [pid 6377] write(3, "1000", 4 [pid 6367] rt_sigprocmask(SIG_SETMASK, [], [pid 6377] <... write resumed>) = 4 [pid 6367] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6377] close(3 [pid 6372] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6367] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6378 attached [pid 6377] <... close resumed>) = 0 [pid 6375] ioctl(4, LOOP_SET_FD, 3 [pid 6373] <... creat resumed>) = 4 [pid 6368] <... futex resumed>) = 0 [pid 6378] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [ 139.535894][ T6370] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.545097][ T6370] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.559408][ T6370] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.568684][ T6370] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6377] symlink("/dev/binderfs", "./binderfs" [pid 6376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6367] <... futex resumed>) = 0 [pid 6368] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... rseq resumed>) = 0 [pid 6377] <... symlink resumed>) = 0 [pid 6367] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... futex resumed>) = 1 [pid 6378] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6377] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6373] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6378] <... set_robust_list resumed>) = 0 [pid 6377] <... futex resumed>) = 0 [pid 6372] <... futex resumed>) = 0 [pid 6378] rt_sigprocmask(SIG_SETMASK, [], [pid 6377] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6372] creat("./bus", 000 [pid 6378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6377] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6378] creat("./file1", 000 [pid 6377] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6372] <... creat resumed>) = 4 [pid 6377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6373] <... futex resumed>) = 1 [pid 6372] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = 0 [pid 6368] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6372] <... futex resumed>) = 0 [pid 6369] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6373] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6377] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6372] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6369] <... futex resumed>) = 0 [pid 6377] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6376] <... write resumed>) = 524288 [pid 6375] <... ioctl resumed>) = 0 [pid 6372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6369] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] <... mprotect resumed>) = 0 [pid 6372] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6377] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6376] munmap(0x7efd74b1c000, 138412032 [pid 6375] close(3 [pid 6368] <... futex resumed>) = 0 [pid 6377] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6379]}, 88) = 6379 [pid 6377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6368] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6375] <... close resumed>) = 0 ./strace-static-x86_64: Process 6379 attached [pid 6377] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6377] <... futex resumed>) = 0 [pid 6379] <... rseq resumed>) = 0 [pid 6377] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 139.580280][ T6370] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.596030][ T6375] loop5: detected capacity change from 0 to 1024 [ 139.612411][ T6370] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.620754][ T6372] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.623324][ T6373] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6379] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6378] <... creat resumed>) = 5 [pid 6376] <... munmap resumed>) = 0 [pid 6375] mkdir("./bus", 0777 [pid 6379] rt_sigprocmask(SIG_SETMASK, [], [pid 6378] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6378] <... futex resumed>) = 1 [pid 6367] <... futex resumed>) = 0 [pid 6379] memfd_create("syzkaller", 0 [pid 6378] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] <... memfd_create resumed>) = 3 [pid 6379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6376] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6375] <... mkdir resumed>) = 0 [pid 6376] <... openat resumed>) = 4 [pid 6375] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6376] ioctl(4, LOOP_SET_FD, 3 [pid 6370] <... write resumed>) = 57344 [pid 6376] <... ioctl resumed>) = 0 [pid 6370] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6369] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6369] <... mmap resumed>) = 0x7efd7cefb000 [pid 6367] exit_group(0 [pid 6376] close(3 [pid 6370] <... futex resumed>) = ? [pid 6369] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6367] <... exit_group resumed>) = ? [pid 6370] +++ exited with 0 +++ [pid 6376] <... close resumed>) = 0 [pid 6376] mkdir("./bus", 0777 [pid 6378] <... futex resumed>) = ? [pid 6376] <... mkdir resumed>) = 0 [pid 6369] <... mprotect resumed>) = 0 [ 139.639317][ T6373] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.650212][ T6376] loop1: detected capacity change from 0 to 1024 [ 139.653155][ T6372] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.658864][ T6373] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.671524][ T6373] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6378] +++ exited with 0 +++ [pid 6376] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6369] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6367] +++ exited with 0 +++ [pid 6369] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6380]}, 88) = 6380 [pid 6369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6368] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6369] <... futex resumed>) = 0 [pid 6368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6380 attached [pid 6369] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6380] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6368] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6380] <... rseq resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6368] <... mprotect resumed>) = 0 [pid 6380] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6379] <... write resumed>) = 524288 [pid 6380] rt_sigprocmask(SIG_SETMASK, [], [pid 6379] munmap(0x7efd74b1c000, 138412032 [pid 6368] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] newfstatat(3, "", [pid 6379] <... munmap resumed>) = 0 [pid 6368] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6380] creat("./file1", 000 [pid 6379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6379] ioctl(4, LOOP_SET_FD, 3 [pid 5069] getdents64(3, [pid 6368] <... clone3 resumed> => {parent_tid=[6381]}, 88) = 6381 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6381 attached [pid 6381] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6381] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 5069] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6368] rt_sigprocmask(SIG_SETMASK, [], [pid 6381] rt_sigprocmask(SIG_SETMASK, [], [pid 6375] <... mount resumed>) = 0 [pid 6368] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 139.684821][ T6373] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.693026][ T6372] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.708878][ T6372] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.711660][ T6379] loop0: detected capacity change from 0 to 1024 [ 139.718014][ T6373] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6379] <... ioctl resumed>) = 0 [pid 6375] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6368] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6381] creat("./file1", 000 [pid 6380] <... creat resumed>) = 5 [pid 6379] close(3 [pid 6376] <... mount resumed>) = 0 [pid 6375] <... openat resumed>) = 3 [pid 6373] <... write resumed>) = 57344 [pid 6369] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6368] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... close resumed>) = 0 [pid 6376] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6375] chdir("./bus" [pid 6373] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6369] exit_group(0 [pid 6379] mkdir("./bus", 0777 [pid 6376] <... openat resumed>) = 3 [pid 6375] <... chdir resumed>) = 0 [pid 6373] <... futex resumed>) = ? [pid 6369] <... exit_group resumed>) = ? [pid 6380] <... futex resumed>) = ? [pid 6379] <... mkdir resumed>) = 0 [pid 6376] chdir("./bus" [pid 6375] ioctl(4, LOOP_CLR_FD [pid 6373] +++ exited with 0 +++ [pid 6379] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6376] <... chdir resumed>) = 0 [pid 6375] <... ioctl resumed>) = 0 [pid 6376] ioctl(4, LOOP_CLR_FD [pid 6375] close(4 [pid 6380] +++ exited with 0 +++ [pid 6376] <... ioctl resumed>) = 0 [pid 6369] +++ exited with 0 +++ [pid 5069] <... umount2 resumed>) = 0 [pid 6375] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6369, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6375] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6376] close(4 [pid 6375] <... futex resumed>) = 1 [pid 6371] <... futex resumed>) = 0 [ 139.735761][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 139.752272][ T6372] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6381] <... creat resumed>) = 5 [pid 6376] <... close resumed>) = 0 [pid 6375] creat("./bus", 000 [pid 6371] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... mount resumed>) = 0 [pid 6376] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6375] <... creat resumed>) = 4 [pid 6372] <... write resumed>) = 57344 [pid 6371] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6381] <... futex resumed>) = 1 [pid 6379] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6376] <... futex resumed>) = 1 [pid 6375] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... futex resumed>) = 0 [pid 6372] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6368] <... futex resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./71/bus", [pid 6381] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] <... openat resumed>) = 3 [pid 6376] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6375] <... futex resumed>) = 0 [pid 6374] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6372] <... futex resumed>) = 0 [pid 6371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6368] exit_group(0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6381] <... futex resumed>) = ? [pid 6376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6375] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] <... futex resumed>) = 0 [pid 6371] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6368] <... exit_group resumed>) = ? [pid 5069] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6381] +++ exited with 0 +++ [pid 6379] chdir("./bus" [pid 6376] creat("./bus", 000 [pid 6375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6374] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6372] +++ exited with 0 +++ [pid 6371] <... futex resumed>) = 0 [pid 6368] +++ exited with 0 +++ [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6375] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6368, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5067] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6376] <... creat resumed>) = 4 [pid 6371] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] openat(AT_FDCWD, "./71/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 6376] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(3, "", [pid 5069] <... openat resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6376] <... futex resumed>) = 1 [pid 6374] <... futex resumed>) = 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6379] <... chdir resumed>) = 0 [pid 6376] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6374] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(4, "", [pid 5067] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] ioctl(4, LOOP_CLR_FD [pid 6376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6374] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6379] <... ioctl resumed>) = 0 [pid 5068] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6379] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6379] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 3 [pid 6379] <... futex resumed>) = 1 [pid 5068] newfstatat(3, "", [pid 6379] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [ 139.788330][ T6372] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] getdents64(4, [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6377] <... futex resumed>) = 0 [pid 6376] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6374] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6377] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6379] <... futex resumed>) = 0 [pid 6377] <... futex resumed>) = 1 [pid 5069] getdents64(4, [pid 6377] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4 [pid 6379] creat("./bus", 000 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./71/bus" [pid 6379] <... creat resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 5069] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6379] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6377] <... futex resumed>) = 0 [pid 6379] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6377] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6377] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 139.828882][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 139.846381][ T6376] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.848501][ T6375] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.868424][ T6376] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6371] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] unlink("./71/binderfs") = 0 [pid 6374] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = 0 [pid 5069] getdents64(3, [pid 6374] <... futex resumed>) = 0 [pid 6371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] close(3 [pid 6374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6371] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... close resumed>) = 0 [pid 6377] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 139.875605][ T6375] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.881492][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 139.884960][ T6375] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.900624][ T6379] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.901853][ T6376] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6374] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6371] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] rmdir("./71" [pid 6377] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6374] <... mprotect resumed>) = 0 [pid 6371] <... mprotect resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6377] <... futex resumed>) = 0 [pid 6374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] mkdir("./72", 0777 [pid 6377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6377] <... mmap resumed>) = 0x7efd7cefb000 [pid 6374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6377] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./72/bus", ./strace-static-x86_64: Process 6382 attached [pid 6377] <... mprotect resumed>) = 0 [pid 6374] <... clone3 resumed> => {parent_tid=[6383]}, 88) = 6383 [pid 6371] <... clone3 resumed> => {parent_tid=[6382]}, 88) = 6382 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6382] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6377] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6374] rt_sigprocmask(SIG_SETMASK, [], [pid 6371] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 139.931139][ T6376] hfsplus: request for non-existent node 16715520 in B*Tree [ 139.960699][ T6376] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6383 attached [pid 6382] <... rseq resumed>) = 0 [pid 6377] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] close(3 [pid 5068] openat(AT_FDCWD, "./72/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6382] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6383] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6382] rt_sigprocmask(SIG_SETMASK, [], [pid 6377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6374] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6382] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6384 attached [pid 6383] <... rseq resumed>) = 0 [pid 6382] creat("./file1", 000 [pid 6374] <... futex resumed>) = 0 [pid 6371] <... futex resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(4, "", [pid 5067] newfstatat(AT_FDCWD, "./70/bus", [pid 6384] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6383] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6374] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6385 attached [pid 6384] <... rseq resumed>) = 0 [pid 6383] <... set_robust_list resumed>) = 0 [pid 6382] <... creat resumed>) = 5 [pid 6377] <... clone3 resumed> => {parent_tid=[6384]}, 88) = 6384 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6385 [pid 5068] getdents64(4, [pid 5067] umount2("./70/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] rt_sigprocmask(SIG_SETMASK, [], [pid 6377] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] openat(AT_FDCWD, "./70/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6383] creat("./file1", 000 [ 139.984224][ T6379] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.010705][ T6375] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.020473][ T6376] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6377] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 4 [pid 6385] set_robust_list(0x555555fbc6a0, 24 [pid 6384] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6383] <... creat resumed>) = 5 [pid 6382] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6383] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6377] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6376] <... write resumed>) = 57344 [pid 5067] getdents64(4, [pid 6376] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6376] <... futex resumed>) = 0 [pid 5067] close(4 [pid 6376] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./70/bus") = 0 [pid 6385] <... set_robust_list resumed>) = 0 [pid 6382] <... futex resumed>) = 1 [pid 5068] getdents64(4, [pid 6371] <... futex resumed>) = 0 [pid 6385] chdir("./72" [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6384] <... set_robust_list resumed>) = 0 [pid 6382] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] <... futex resumed>) = 1 [pid 6374] <... futex resumed>) = 0 [pid 6384] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] close(4 [pid 6385] <... chdir resumed>) = 0 [pid 6374] exit_group(0 [pid 6376] <... futex resumed>) = ? [pid 6374] <... exit_group resumed>) = ? [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6376] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./72/bus" [pid 6385] <... prctl resumed>) = 0 [pid 6384] creat("./file1", 000 [pid 5067] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] +++ exited with 0 +++ [pid 6374] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./70/binderfs") = 0 [pid 6385] setpgid(0, 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 6385] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6374, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5068] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./70" [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 [pid 6385] <... openat resumed>) = 3 [pid 5068] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5067] <... rmdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6385] write(3, "1000", 4 [pid 5068] unlink("./72/binderfs" [pid 5066] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./71", 0777 [pid 6385] <... write resumed>) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6385] close(3) = 0 [pid 5066] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6385] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... openat resumed>) = 3 [pid 6385] <... symlink resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 6385] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6385] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6385] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] getdents64(3, [pid 6385] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6385] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6384] <... creat resumed>) = 5 [pid 5068] getdents64(3, [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6384] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6384] <... futex resumed>) = 1 [pid 6377] <... futex resumed>) = 0 [pid 5068] close(3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 140.029367][ T6379] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.030638][ T6375] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.037634][ T6379] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.072374][ T6375] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6385] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6384] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... close resumed>) = 0 [pid 5067] close(3 [pid 6375] <... write resumed>) = 57344 [pid 6385] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5068] rmdir("./72" [pid 5067] <... close resumed>) = 0 [pid 6375] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6385] <... mprotect resumed>) = 0 [pid 6375] <... futex resumed>) = 0 [pid 6371] exit_group(0 [pid 5068] <... rmdir resumed>) = 0 [pid 6371] <... exit_group resumed>) = ? [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6382] <... futex resumed>) = ? [pid 6375] +++ exited with 0 +++ [pid 5068] mkdir("./73", 0777 [pid 6385] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6386 ./strace-static-x86_64: Process 6387 attached [pid 6387] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6382] +++ exited with 0 +++ [pid 6371] +++ exited with 0 +++ ./strace-static-x86_64: Process 6386 attached [pid 6387] <... rseq resumed>) = 0 [pid 6385] <... clone3 resumed> => {parent_tid=[6387]}, 88) = 6387 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6371, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6386] set_robust_list(0x555555fbc6a0, 24 [pid 5068] <... openat resumed>) = 3 [pid 6386] <... set_robust_list resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6387] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6385] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 6387] <... set_robust_list resumed>) = 0 [pid 6387] rt_sigprocmask(SIG_SETMASK, [], [pid 6386] chdir("./71" [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... close resumed>) = 0 [pid 6387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6386] <... chdir resumed>) = 0 [pid 6385] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6387] memfd_create("syzkaller", 0 [pid 6386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6385] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 6387] <... memfd_create resumed>) = 3 [pid 6385] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 6388 attached [pid 6386] <... prctl resumed>) = 0 [pid 5070] newfstatat(3, "", [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6386] setpgid(0, 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6388 [pid 6388] set_robust_list(0x555555fbc6a0, 24 [pid 6387] <... mmap resumed>) = 0x7efd74b1c000 [pid 6386] <... setpgid resumed>) = 0 [pid 5070] getdents64(3, [pid 6388] <... set_robust_list resumed>) = 0 [pid 6379] <... write resumed>) = 57344 [pid 6388] chdir("./73" [pid 6379] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] <... chdir resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6379] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6386] <... openat resumed>) = 3 [pid 5070] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6388] <... prctl resumed>) = 0 [pid 6386] write(3, "1000", 4 [pid 6377] exit_group(0 [pid 6388] setpgid(0, 0 [pid 6384] <... futex resumed>) = ? [pid 6377] <... exit_group resumed>) = ? [ 140.084601][ T6379] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.097042][ T6379] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.106096][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6388] <... setpgid resumed>) = 0 [pid 6386] <... write resumed>) = 4 [pid 6379] <... futex resumed>) = ? [pid 6384] +++ exited with 0 +++ [pid 6387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5066] newfstatat(AT_FDCWD, "./72/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] close(3 [pid 5066] openat(AT_FDCWD, "./72/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6386] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5066] newfstatat(4, "", [pid 6386] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, [pid 6386] <... symlink resumed>) = 0 [pid 6379] +++ exited with 0 +++ [pid 6377] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 6386] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6377, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6388] <... openat resumed>) = 3 [pid 6386] <... futex resumed>) = 0 [pid 5066] close(4 [pid 6388] write(3, "1000", 4 [pid 6386] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... close resumed>) = 0 [pid 6388] <... write resumed>) = 4 [pid 6386] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] rmdir("./72/bus" [pid 5065] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6388] close(3 [pid 6387] <... write resumed>) = 524288 [pid 6386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6388] <... close resumed>) = 0 [pid 6387] munmap(0x7efd74b1c000, 138412032 [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6388] symlink("/dev/binderfs", "./binderfs" [pid 6387] <... munmap resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... openat resumed>) = 3 [pid 6388] <... symlink resumed>) = 0 [pid 6387] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6386] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5065] newfstatat(3, "", [pid 6388] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6388] <... futex resumed>) = 0 [pid 6386] <... mprotect resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6388] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6387] <... openat resumed>) = 4 [pid 6386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] getdents64(3, [pid 6388] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6386] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6389 attached [pid 6388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6389] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [ 140.165591][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6386] <... clone3 resumed> => {parent_tid=[6389]}, 88) = 6389 [pid 5065] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6389] <... rseq resumed>) = 0 [pid 6388] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6386] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] unlink("./72/binderfs" [pid 6389] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6389] <... set_robust_list resumed>) = 0 [pid 6388] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6386] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] rt_sigprocmask(SIG_SETMASK, [], [pid 6388] <... mprotect resumed>) = 0 [pid 6386] <... futex resumed>) = 0 [pid 6389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6386] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6389] memfd_create("syzkaller", 0 [pid 6388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6389] <... memfd_create resumed>) = 3 [pid 6388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6389] <... mmap resumed>) = 0x7efd74b1c000 ./strace-static-x86_64: Process 6390 attached [pid 6390] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6388] <... clone3 resumed> => {parent_tid=[6390]}, 88) = 6390 [pid 5066] <... unlink resumed>) = 0 [pid 6387] ioctl(4, LOOP_SET_FD, 3 [pid 5070] newfstatat(AT_FDCWD, "./72/bus", [pid 5066] getdents64(3, [pid 6390] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6388] rt_sigprocmask(SIG_SETMASK, [], [pid 6390] <... set_robust_list resumed>) = 0 [pid 6388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6390] rt_sigprocmask(SIG_SETMASK, [], [pid 6388] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6388] <... futex resumed>) = 0 [pid 6390] memfd_create("syzkaller", 0) = 3 [pid 6390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6388] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6390] <... mmap resumed>) = 0x7efd74b1c000 [pid 6390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6387] <... ioctl resumed>) = 0 [pid 5070] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./72" [pid 5070] openat(AT_FDCWD, "./72/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... rmdir resumed>) = 0 [pid 6389] <... write resumed>) = 524288 [pid 5070] <... openat resumed>) = 4 [pid 5066] mkdir("./73", 0777 [pid 5070] newfstatat(4, "", [pid 5066] <... mkdir resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5070] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5070] getdents64(4, [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6389] munmap(0x7efd74b1c000, 138412032 [pid 6390] <... write resumed>) = 524288 [pid 6387] close(3 [pid 5070] close(4 [pid 5066] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6387] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6389] <... munmap resumed>) = 0 [pid 6387] mkdir("./bus", 0777 [pid 5070] <... close resumed>) = 0 [pid 5065] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6391 attached [pid 6387] <... mkdir resumed>) = 0 [pid 5070] rmdir("./72/bus" [pid 6390] munmap(0x7efd74b1c000, 138412032 [pid 6389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6390] <... munmap resumed>) = 0 [pid 6389] <... openat resumed>) = 4 [pid 6387] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6391 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] set_robust_list(0x555555fbc6a0, 24 [pid 5070] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./71/bus", [pid 6391] chdir("./73" [ 140.209132][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 140.222251][ T6387] loop4: detected capacity change from 0 to 1024 [pid 5070] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6391] <... chdir resumed>) = 0 [pid 6389] ioctl(4, LOOP_SET_FD, 3 [pid 6387] <... mount resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6387] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] unlink("./72/binderfs" [pid 5065] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] <... openat resumed>) = 3 [pid 6387] chdir("./bus") = 0 [pid 6390] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6387] ioctl(4, LOOP_CLR_FD [pid 6391] <... prctl resumed>) = 0 [pid 6390] <... openat resumed>) = 4 [pid 6387] <... ioctl resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] setpgid(0, 0 [pid 6390] ioctl(4, LOOP_SET_FD, 3 [pid 6387] close(4 [pid 5070] getdents64(3, [pid 5065] openat(AT_FDCWD, "./71/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6391] <... setpgid resumed>) = 0 [pid 6387] <... close resumed>) = 0 [pid 6387] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6387] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6389] <... ioctl resumed>) = 0 [pid 5070] close(3 [pid 5065] newfstatat(4, "", [pid 6385] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... openat resumed>) = 3 [pid 6387] <... futex resumed>) = 0 [pid 6385] <... futex resumed>) = 1 [pid 5070] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6391] write(3, "1000", 4 [pid 5070] rmdir("./72" [pid 5065] getdents64(4, [pid 6391] <... write resumed>) = 4 [pid 6385] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] close(3 [pid 6389] close(3 [pid 6387] creat("./bus", 000 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6391] <... close resumed>) = 0 [pid 6389] <... close resumed>) = 0 [pid 6387] <... creat resumed>) = 4 [pid 5070] mkdir("./73", 0777 [pid 6391] symlink("/dev/binderfs", "./binderfs" [pid 6389] mkdir("./bus", 0777 [pid 6387] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(4, [pid 6391] <... symlink resumed>) = 0 [pid 6389] <... mkdir resumed>) = 0 [pid 6387] <... futex resumed>) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6391] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6387] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6391] <... futex resumed>) = 0 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] <... futex resumed>) = 0 [pid 5065] close(4 [pid 6391] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6390] <... ioctl resumed>) = 0 [ 140.280858][ T6389] loop2: detected capacity change from 0 to 1024 [ 140.296108][ T6390] loop3: detected capacity change from 0 to 1024 [pid 6387] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6385] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [pid 6391] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6390] close(3 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] rmdir("./71/bus" [pid 6390] <... close resumed>) = 0 [pid 6390] mkdir("./bus", 0777 [pid 6391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6390] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6390] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6391] <... mprotect resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6391] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6389] <... mount resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6392 attached [pid 6391] <... clone3 resumed> => {parent_tid=[6392]}, 88) = 6392 [pid 5065] unlink("./71/binderfs" [pid 6392] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6391] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6392] <... rseq resumed>) = 0 [pid 6391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6390] <... mount resumed>) = 0 [pid 6389] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] close(3 [pid 5065] <... unlink resumed>) = 0 [pid 6390] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6389] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 6392] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6391] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] <... openat resumed>) = 3 [pid 6389] chdir("./bus" [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(3, [pid 6392] <... set_robust_list resumed>) = 0 [pid 6391] <... futex resumed>) = 0 [pid 6390] chdir("./bus" [pid 6389] <... chdir resumed>) = 0 [pid 6392] rt_sigprocmask(SIG_SETMASK, [], [pid 6391] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6390] <... chdir resumed>) = 0 [pid 6389] ioctl(4, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6390] ioctl(4, LOOP_CLR_FD [pid 6389] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 6392] memfd_create("syzkaller", 0 [pid 6390] <... ioctl resumed>) = 0 [pid 6389] close(4 [pid 6392] <... memfd_create resumed>) = 3 [pid 6390] close(4 [pid 6389] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6390] <... close resumed>) = 0 [pid 6389] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6390] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] <... futex resumed>) = 1 [pid 6386] <... futex resumed>) = 0 [pid 5065] rmdir("./71" [pid 6392] <... mmap resumed>) = 0x7efd74b1c000 [pid 6389] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6393 [pid 6390] <... futex resumed>) = 1 [pid 6388] <... futex resumed>) = 0 [pid 6386] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] creat("./bus", 000 [pid 6389] <... futex resumed>) = 0 [pid 6388] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... futex resumed>) = 1 [pid 6390] <... creat resumed>) = 4 [pid 6389] creat("./bus", 000 [pid 5065] <... rmdir resumed>) = 0 [pid 6390] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6389] <... creat resumed>) = 4 [pid 6388] <... futex resumed>) = 0 [pid 6386] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6390] <... futex resumed>) = 0 [pid 6389] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6393 attached [pid 6390] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] mkdir("./72", 0777 [pid 6389] <... futex resumed>) = 0 [pid 6388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6393] set_robust_list(0x555555fbc6a0, 24 [pid 6389] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6388] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6390] <... futex resumed>) = 0 [pid 6389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6388] <... futex resumed>) = 1 [pid 6390] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6389] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6388] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6393] <... set_robust_list resumed>) = 0 [ 140.324572][ T6387] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.354634][ T6387] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6386] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] chdir("./73" [pid 6392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6385] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 5065] <... openat resumed>) = 3 [pid 6393] <... chdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6393] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6385] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6393] <... prctl resumed>) = 0 [pid 6385] <... mprotect resumed>) = 0 [pid 5065] close(3 [pid 6393] setpgid(0, 0) = 0 [pid 5065] <... close resumed>) = 0 [pid 6393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6385] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6385] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6394 attached ./strace-static-x86_64: Process 6395 attached [pid 6394] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6393] <... openat resumed>) = 3 [pid 6392] <... write resumed>) = 524288 [pid 6385] <... clone3 resumed> => {parent_tid=[6394]}, 88) = 6394 [pid 6395] set_robust_list(0x555555fbc6a0, 24 [pid 6394] <... rseq resumed>) = 0 [pid 6393] write(3, "1000", 4 [pid 6395] <... set_robust_list resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6395 [pid 6394] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6393] <... write resumed>) = 4 [pid 6395] chdir("./72" [pid 6394] <... set_robust_list resumed>) = 0 [pid 6393] close(3 [pid 6388] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6385] rt_sigprocmask(SIG_SETMASK, [], [ 140.377966][ T6389] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.386700][ T6390] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.398005][ T6387] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.410062][ T6390] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.421080][ T6389] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6394] rt_sigprocmask(SIG_SETMASK, [], [pid 6395] <... chdir resumed>) = 0 [pid 6394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6393] <... close resumed>) = 0 [pid 6392] munmap(0x7efd74b1c000, 138412032 [pid 6388] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6394] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] symlink("/dev/binderfs", "./binderfs" [pid 6386] <... futex resumed>) = 0 [pid 6385] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... prctl resumed>) = 0 [pid 6394] <... futex resumed>) = 0 [pid 6393] <... symlink resumed>) = 0 [pid 6386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6385] <... futex resumed>) = 1 [pid 6394] creat("./file1", 000 [pid 6392] <... munmap resumed>) = 0 [pid 6388] <... futex resumed>) = 0 [pid 6386] <... mmap resumed>) = 0x7efd7cefb000 [pid 6385] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6393] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] setpgid(0, 0 [pid 6388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6386] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6395] <... setpgid resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 6388] <... mmap resumed>) = 0x7efd7cefb000 [pid 6386] <... mprotect resumed>) = 0 [pid 6395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6393] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6388] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6386] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6393] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6388] <... mprotect resumed>) = 0 [pid 6386] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6395] <... openat resumed>) = 3 [pid 6393] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6388] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6388] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6397 attached ./strace-static-x86_64: Process 6396 attached [pid 6395] write(3, "1000", 4 [pid 6393] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6392] <... openat resumed>) = 4 [pid 6388] <... clone3 resumed> => {parent_tid=[6397]}, 88) = 6397 [pid 6386] <... clone3 resumed> => {parent_tid=[6396]}, 88) = 6396 [pid 6397] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6396] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6395] <... write resumed>) = 4 [pid 6393] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6392] ioctl(4, LOOP_SET_FD, 3 [pid 6397] <... rseq resumed>) = 0 [pid 6396] <... rseq resumed>) = 0 [pid 6395] close(3 [pid 6396] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6393] <... mprotect resumed>) = 0 [pid 6388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6386] rt_sigprocmask(SIG_SETMASK, [], [pid 6388] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6388] <... futex resumed>) = 0 [pid 6386] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6396] <... set_robust_list resumed>) = 0 [pid 6395] <... close resumed>) = 0 [pid 6388] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6397] <... set_robust_list resumed>) = 0 [pid 6396] rt_sigprocmask(SIG_SETMASK, [], [pid 6395] symlink("/dev/binderfs", "./binderfs" [pid 6394] <... creat resumed>) = 5 [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6386] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6397] rt_sigprocmask(SIG_SETMASK, [], [pid 6396] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 140.436487][ T6387] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.458042][ T6390] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.466476][ T6389] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.476031][ T6392] loop1: detected capacity change from 0 to 1024 [pid 6394] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6396] creat("./file1", 000 [pid 6395] <... symlink resumed>) = 0 [pid 6394] <... futex resumed>) = 1 [pid 6393] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6385] <... futex resumed>) = 0 [pid 6392] <... ioctl resumed>) = 0 [pid 6394] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6392] close(3) = 0 ./strace-static-x86_64: Process 6398 attached [pid 6397] creat("./file1", 000 [pid 6395] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] mkdir("./bus", 0777 [pid 6398] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6397] <... creat resumed>) = 5 [pid 6395] <... futex resumed>) = 0 [pid 6393] <... clone3 resumed> => {parent_tid=[6398]}, 88) = 6398 [pid 6392] <... mkdir resumed>) = 0 [pid 6393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6393] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] <... rseq resumed>) = 0 [pid 6397] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6393] <... futex resumed>) = 0 [pid 6392] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6398] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6397] <... futex resumed>) = 1 [pid 6396] <... creat resumed>) = 5 [pid 6395] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6393] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6388] <... futex resumed>) = 0 [pid 6386] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6398] <... set_robust_list resumed>) = 0 [pid 6397] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 140.485236][ T6387] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.500580][ T6390] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.502431][ T6389] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.514967][ T6390] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.525329][ T6390] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6396] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6396] <... futex resumed>) = 0 [pid 6395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6398] memfd_create("syzkaller", 0 [pid 6396] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] <... memfd_create resumed>) = 3 [pid 6395] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6392] <... mount resumed>) = 0 [pid 6390] <... write resumed>) = 57344 [pid 6398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6395] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6390] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6398] <... mmap resumed>) = 0x7efd74b1c000 [pid 6395] <... mprotect resumed>) = 0 [ 140.526420][ T6387] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6392] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6390] <... futex resumed>) = 0 [pid 6395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6392] <... openat resumed>) = 3 [pid 6390] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6392] chdir("./bus" [pid 6388] exit_group(0 [pid 6397] <... futex resumed>) = ? [pid 6395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6390] <... futex resumed>) = ? [pid 6388] <... exit_group resumed>) = ? [pid 6390] +++ exited with 0 +++ [pid 6397] +++ exited with 0 +++ [pid 6398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6392] <... chdir resumed>) = 0 [pid 6392] ioctl(4, LOOP_CLR_FD) = 0 [pid 6392] close(4) = 0 [pid 6388] +++ exited with 0 +++ [pid 6392] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6388, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6392] <... futex resumed>) = 1 [pid 6391] <... futex resumed>) = 0 [pid 6395] <... clone3 resumed> => {parent_tid=[6399]}, 88) = 6399 [pid 6392] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6391] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6391] <... futex resumed>) = 0 [pid 5068] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6399 attached [pid 6392] creat("./bus", 000 [pid 6391] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6392] <... creat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6399] <... rseq resumed>) = 0 [pid 6392] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6392] <... futex resumed>) = 1 [pid 6391] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6399] <... set_robust_list resumed>) = 0 [pid 6392] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6391] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] newfstatat(3, "", [pid 6399] rt_sigprocmask(SIG_SETMASK, [], [pid 6398] <... write resumed>) = 524288 [pid 6395] rt_sigprocmask(SIG_SETMASK, [], [pid 6391] <... futex resumed>) = 0 [pid 6399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6399] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] getdents64(3, [pid 6399] memfd_create("syzkaller", 0 [pid 6395] <... futex resumed>) = 0 [pid 6399] <... memfd_create resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6395] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] <... mmap resumed>) = 0x7efd74b1c000 [pid 6387] <... write resumed>) = 57344 [pid 6398] munmap(0x7efd74b1c000, 138412032 [pid 6399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6387] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6387] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] exit_group(0 [pid 6394] <... futex resumed>) = ? [pid 6387] <... futex resumed>) = ? [pid 6385] <... exit_group resumed>) = ? [pid 6387] +++ exited with 0 +++ [pid 6398] <... munmap resumed>) = 0 [pid 6394] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5069] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6398] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... openat resumed>) = 4 [ 140.557714][ T6389] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.575768][ T6392] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.590473][ T58] hfsplus: b-tree write err: -5, ino 4 [ 140.592521][ T6389] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] <... write resumed>) = 524288 [pid 6398] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6391] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6399] munmap(0x7efd74b1c000, 138412032 [pid 6391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6399] <... munmap resumed>) = 0 [pid 6391] <... mmap resumed>) = 0x7efd7cefb000 [pid 6389] <... write resumed>) = 57344 [pid 6391] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6389] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] exit_group(0) = ? [pid 6396] <... futex resumed>) = ? [pid 6391] <... mprotect resumed>) = 0 [pid 6389] <... futex resumed>) = ? [pid 6396] +++ exited with 0 +++ [pid 6391] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6389] +++ exited with 0 +++ [pid 6386] +++ exited with 0 +++ [pid 6391] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6386, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6400 attached [pid 6398] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6399] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6398] close(3 [pid 6399] <... openat resumed>) = 4 [pid 6398] <... close resumed>) = 0 [pid 5067] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] ioctl(4, LOOP_SET_FD, 3 [pid 6398] mkdir("./bus", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6398] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6391] <... clone3 resumed> => {parent_tid=[6400]}, 88) = 6400 [pid 6400] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6391] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 6398] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 6400] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6391] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6400] <... set_robust_list resumed>) = 0 [pid 6391] <... futex resumed>) = 0 [pid 6400] rt_sigprocmask(SIG_SETMASK, [], [pid 6391] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6400] creat("./file1", 000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 140.617815][ T6392] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.633937][ T6398] loop5: detected capacity change from 0 to 1024 [ 140.647025][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 140.655702][ T6392] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] newfstatat(AT_FDCWD, "./73/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, [pid 6398] <... mount resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6399] <... ioctl resumed>) = 0 [pid 6398] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... umount2 resumed>) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./73/bus" [pid 6398] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 6398] chdir("./bus") = 0 [pid 6398] ioctl(4, LOOP_CLR_FD) = 0 [pid 6398] close(4) = 0 [pid 6398] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6398] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6400] <... creat resumed>) = 5 [pid 6393] <... futex resumed>) = 0 [pid 6400] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6400] <... futex resumed>) = 1 [pid 6393] <... futex resumed>) = 1 [pid 6391] <... futex resumed>) = 0 [pid 6398] <... futex resumed>) = 0 [pid 6393] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6400] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6398] creat("./bus", 000) = 4 [pid 6398] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6398] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6399] close(3) = 0 [pid 6399] mkdir("./bus", 0777) = 0 [pid 6393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6393] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6398] <... futex resumed>) = 0 [ 140.693470][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 140.701230][ T6392] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.713441][ T6399] loop0: detected capacity change from 0 to 1024 [pid 6398] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6393] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./72/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./72/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./72/bus") = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./73/binderfs" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 5069] newfstatat(AT_FDCWD, "./72/binderfs", [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] close(3 [pid 6399] <... mount resumed>) = 0 [pid 5069] unlink("./72/binderfs" [pid 5068] <... close resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5068] rmdir("./73" [pid 5067] <... umount2 resumed>) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./72") = 0 [pid 6399] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] mkdir("./73", 0777 [pid 5068] <... rmdir resumed>) = 0 [pid 6399] chdir("./bus" [pid 5069] <... mkdir resumed>) = 0 [ 140.745081][ T6398] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.753581][ T6392] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.780240][ T6398] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6399] <... chdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] mkdir("./74", 0777 [pid 5069] <... openat resumed>) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3 [pid 6399] ioctl(4, LOOP_CLR_FD [pid 5069] <... close resumed>) = 0 [pid 6399] <... ioctl resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] close(4 [pid 6393] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./71/bus", [pid 6399] <... close resumed>) = 0 [pid 6393] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./71/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6399] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6401 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6399] <... futex resumed>) = 1 [pid 6395] <... futex resumed>) = 0 [pid 6393] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6395] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6395] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6399] creat("./bus", 000 [pid 6393] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./71/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6399] <... creat resumed>) = 4 [pid 6393] <... mprotect resumed>) = 0 [ 140.789415][ T6392] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6401 attached [pid 6399] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... openat resumed>) = 4 [pid 6401] set_robust_list(0x555555fbc6a0, 24 [pid 6399] <... futex resumed>) = 1 [pid 6395] <... futex resumed>) = 0 [pid 6393] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] newfstatat(4, "", [pid 6401] <... set_robust_list resumed>) = 0 [pid 6399] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6393] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] close(3./strace-static-x86_64: Process 6402 attached [pid 6401] chdir("./73" [pid 6399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6395] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6402] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6401] <... chdir resumed>) = 0 [pid 6392] <... write resumed>) = 57344 [pid 6401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6399] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6393] <... clone3 resumed> => {parent_tid=[6402]}, 88) = 6402 [pid 6392] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6402] <... rseq resumed>) = 0 [pid 6401] <... prctl resumed>) = 0 [pid 6395] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] exit_group(0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(4, [pid 6402] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6401] setpgid(0, 0 [pid 6400] <... futex resumed>) = ? [pid 6393] rt_sigprocmask(SIG_SETMASK, [], [pid 6392] <... futex resumed>) = ? [pid 6391] <... exit_group resumed>) = ? [pid 6402] <... set_robust_list resumed>) = 0 [pid 6401] <... setpgid resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6402] rt_sigprocmask(SIG_SETMASK, [], [pid 6401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6400] +++ exited with 0 +++ [pid 6392] +++ exited with 0 +++ [pid 6391] +++ exited with 0 +++ [pid 5067] getdents64(4, [pid 6402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6402] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6403 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6391, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6401] <... openat resumed>) = 3 [pid 6393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] close(4 [pid 5066] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 6403 attached [pid 6401] write(3, "1000", 4 [pid 6393] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... close resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 6393] <... futex resumed>) = 1 [pid 6402] <... futex resumed>) = 0 [ 140.827041][ T6398] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6393] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6403] set_robust_list(0x555555fbc6a0, 24 [pid 6402] creat("./file1", 000 [pid 6401] <... write resumed>) = 4 [pid 5067] rmdir("./71/bus" [pid 6401] close(3) = 0 [pid 6401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] <... set_robust_list resumed>) = 0 [pid 6401] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6401] <... futex resumed>) = 0 [pid 6401] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6403] chdir("./74" [pid 6401] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6403] <... chdir resumed>) = 0 [pid 6395] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 6395] <... futex resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./71/binderfs", [pid 6403] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6403] <... prctl resumed>) = 0 [pid 6395] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] unlink("./71/binderfs" [pid 5066] newfstatat(3, "", [pid 6395] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6401] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6395] <... mprotect resumed>) = 0 [pid 6403] setpgid(0, 0 [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6403] <... setpgid resumed>) = 0 [pid 6395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] getdents64(3, [pid 6403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6402] <... creat resumed>) = 5 [pid 6401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6393] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6401] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6395] <... clone3 resumed> => {parent_tid=[6404]}, 88) = 6404 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6404 attached [pid 6403] <... openat resumed>) = 3 [pid 6402] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6401] <... mprotect resumed>) = 0 [pid 6395] rt_sigprocmask(SIG_SETMASK, [], [pid 6404] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6403] write(3, "1000", 4 [pid 6402] <... futex resumed>) = 0 [pid 6401] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6403] <... write resumed>) = 4 [pid 6402] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6401] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6395] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] <... rseq resumed>) = 0 [pid 6403] close(3 [ 140.869463][ T6398] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.903576][ T6399] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.912618][ T6399] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6395] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6404] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6403] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6405 attached [pid 6404] <... set_robust_list resumed>) = 0 [pid 6403] symlink("/dev/binderfs", "./binderfs" [pid 6401] <... clone3 resumed> => {parent_tid=[6405]}, 88) = 6405 [pid 6405] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6401] rt_sigprocmask(SIG_SETMASK, [], [pid 6405] <... rseq resumed>) = 0 [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6405] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6401] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] <... set_robust_list resumed>) = 0 [pid 6401] <... futex resumed>) = 0 [pid 6405] rt_sigprocmask(SIG_SETMASK, [], [pid 6401] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6404] rt_sigprocmask(SIG_SETMASK, [], [pid 6403] <... symlink resumed>) = 0 [pid 6395] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] rmdir("./71" [pid 6404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6403] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] memfd_create("syzkaller", 0 [pid 6404] creat("./file1", 000 [pid 6403] <... futex resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6403] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 5067] mkdir("./72", 0777 [pid 6405] <... memfd_create resumed>) = 3 [pid 6403] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5067] <... mkdir resumed>) = 0 [pid 6403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6403] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... openat resumed>) = 3 [pid 6403] <... mprotect resumed>) = 0 [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6403] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6403] <... clone3 resumed> => {parent_tid=[6406]}, 88) = 6406 [pid 6403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6403] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6406 attached ) = 0 [pid 6398] <... write resumed>) = 57344 [pid 5067] close(3 [pid 6403] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... close resumed>) = 0 [pid 6406] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6398] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] <... rseq resumed>) = 0 [pid 6398] <... futex resumed>) = 0 [pid 6406] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6398] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6406] <... set_robust_list resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6393] exit_group(0 [pid 6406] rt_sigprocmask(SIG_SETMASK, [], [pid 6398] <... futex resumed>) = ? [pid 6393] <... exit_group resumed>) = ? [pid 6406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6398] +++ exited with 0 +++ [pid 6406] memfd_create("syzkaller", 0) = 3 [pid 6405] <... write resumed>) = 524288 [pid 6402] <... futex resumed>) = ? [pid 6406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6407 [pid 6406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6407 attached [pid 6402] +++ exited with 0 +++ [pid 6393] +++ exited with 0 +++ [pid 6407] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6393, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6407] chdir("./72" [pid 5070] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6407] <... chdir resumed>) = 0 [pid 6407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6405] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5070] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... prctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] setpgid(0, 0 [pid 5070] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6407] <... setpgid resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] newfstatat(3, "", [pid 6407] <... openat resumed>) = 3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6405] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5070] getdents64(3, [pid 6407] write(3, "1000", 4 [pid 6405] <... openat resumed>) = 4 [pid 6404] <... creat resumed>) = 5 [pid 6395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6407] <... write resumed>) = 4 [pid 6405] ioctl(4, LOOP_SET_FD, 3 [pid 6404] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 140.928989][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 140.932784][ T6399] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.942145][ T6398] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.949455][ T6398] hfsplus: request for non-existent node 16715520 in B*Tree [ 140.968812][ T6399] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6407] close(3 [pid 6404] <... futex resumed>) = 0 [pid 6407] <... close resumed>) = 0 [pid 6406] <... write resumed>) = 524288 [pid 6405] <... ioctl resumed>) = 0 [pid 6404] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... umount2 resumed>) = 0 [pid 6407] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] munmap(0x7efd74b1c000, 138412032 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6406] <... munmap resumed>) = 0 [pid 6407] <... futex resumed>) = 0 [pid 6406] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] newfstatat(AT_FDCWD, "./73/bus", [pid 6407] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6406] <... openat resumed>) = 4 [pid 6407] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6406] ioctl(4, LOOP_SET_FD, 3 [pid 6407] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6406] <... ioctl resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6407] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6407] <... mprotect resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6405] close(3 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6405] <... close resumed>) = 0 [pid 6405] mkdir("./bus", 0777 [pid 5066] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6407] <... clone3 resumed> => {parent_tid=[6408]}, 88) = 6408 [pid 6405] <... mkdir resumed>) = 0 [pid 6407] rt_sigprocmask(SIG_SETMASK, [], [pid 6405] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] <... openat resumed>) = 4 [pid 6407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] newfstatat(4, "", [pid 6407] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6408 attached ) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6408] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6407] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6406] close(3 [pid 5066] getdents64(4, [pid 6408] <... rseq resumed>) = 0 [pid 6406] <... close resumed>) = 0 [pid 6408] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6406] mkdir("./bus", 0777 [pid 6408] <... set_robust_list resumed>) = 0 [pid 6406] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6408] rt_sigprocmask(SIG_SETMASK, [], [pid 6406] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] getdents64(4, [pid 6408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6408] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6408] <... memfd_create resumed>) = 3 [pid 6406] <... mount resumed>) = 0 [pid 6405] <... mount resumed>) = 0 [pid 6399] <... write resumed>) = 57344 [pid 5066] close(4 [pid 6408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6406] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6405] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6399] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 6408] <... mmap resumed>) = 0x7efd74b1c000 [pid 6406] <... openat resumed>) = 3 [pid 6405] <... openat resumed>) = 3 [pid 6399] <... futex resumed>) = 0 [pid 5070] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [ 141.012500][ T6405] loop4: detected capacity change from 0 to 1024 [ 141.019850][ T6399] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.028133][ T58] hfsplus: b-tree write err: -5, ino 4 [ 141.041639][ T6406] loop3: detected capacity change from 0 to 1024 [ 141.051482][ T6399] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6406] chdir("./bus" [pid 6405] chdir("./bus" [pid 6399] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6395] exit_group(0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./73/bus" [pid 6406] <... chdir resumed>) = 0 [pid 6405] <... chdir resumed>) = 0 [pid 6404] <... futex resumed>) = ? [pid 6399] <... futex resumed>) = ? [pid 6395] <... exit_group resumed>) = ? [pid 5070] newfstatat(AT_FDCWD, "./73/bus", [pid 6408] <... write resumed>) = 524288 [pid 6406] ioctl(4, LOOP_CLR_FD [pid 6405] ioctl(4, LOOP_CLR_FD [pid 6404] +++ exited with 0 +++ [pid 6399] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 6406] <... ioctl resumed>) = 0 [pid 6405] <... ioctl resumed>) = 0 [pid 6405] close(4 [pid 6406] close(4 [pid 6405] <... close resumed>) = 0 [pid 6406] <... close resumed>) = 0 [pid 6405] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6401] <... futex resumed>) = 0 [pid 6401] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6406] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6395] +++ exited with 0 +++ [pid 6406] <... futex resumed>) = 1 [pid 6403] <... futex resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6395, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5066] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6403] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6403] <... futex resumed>) = 0 [pid 6403] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6405] creat("./bus", 000 [pid 6406] creat("./bus", 000 [pid 6405] <... creat resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6406] <... creat resumed>) = 4 [pid 6405] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] unlink("./73/binderfs" [pid 5070] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] <... futex resumed>) = 1 [pid 6401] <... futex resumed>) = 0 [pid 6401] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... unlink resumed>) = 0 [pid 6401] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6401] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6406] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6405] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5070] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... openat resumed>) = 4 [pid 5070] newfstatat(4, "", [pid 5066] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 5070] getdents64(4, [pid 5065] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 6406] <... futex resumed>) = 1 [pid 6403] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] rmdir("./73" [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6406] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6403] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6408] munmap(0x7efd74b1c000, 138412032 [pid 6403] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] mkdir("./74", 0777 [pid 5065] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6408] <... munmap resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 6408] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] close(4 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5070] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5070] rmdir("./73/bus" [pid 6408] <... openat resumed>) = 4 [pid 6408] ioctl(4, LOOP_SET_FD, 3 [pid 6401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6401] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6401] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6401] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5070] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 6401] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] newfstatat(AT_FDCWD, "./73/binderfs", [pid 6401] <... clone3 resumed> => {parent_tid=[6409]}, 88) = 6409 [pid 6401] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6401] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6401] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6408] <... ioctl resumed>) = 0 [pid 6408] close(3) = 0 [pid 6408] mkdir("./bus", 0777 [pid 5070] unlink("./73/binderfs"./strace-static-x86_64: Process 6409 attached ) = 0 [pid 6409] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5070] getdents64(3, [pid 6409] <... rseq resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6409] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6410 [pid 6409] <... set_robust_list resumed>) = 0 [pid 5070] close(3 [pid 6409] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... close resumed>) = 0 [pid 6409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6409] creat("./file1", 000 [pid 5070] rmdir("./73"./strace-static-x86_64: Process 6410 attached [pid 6408] <... mkdir resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [ 141.127404][ T6405] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.140574][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 141.149980][ T6406] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.159231][ T6408] loop2: detected capacity change from 0 to 1024 [pid 6410] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] mkdir("./74", 0777 [pid 6408] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6403] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] chdir("./74") = 0 [pid 6403] <... futex resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 6410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6403] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6410] <... prctl resumed>) = 0 [pid 6403] <... mmap resumed>) = 0x7efd7cefb000 [pid 6403] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6410] setpgid(0, 0 [pid 6403] <... mprotect resumed>) = 0 [pid 6403] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6410] <... setpgid resumed>) = 0 [pid 6403] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6403] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6403] <... clone3 resumed> => {parent_tid=[6411]}, 88) = 6411 ./strace-static-x86_64: Process 6411 attached [pid 6410] <... openat resumed>) = 3 [pid 6408] <... mount resumed>) = 0 [pid 6403] rt_sigprocmask(SIG_SETMASK, [], [pid 6411] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6408] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6411] <... rseq resumed>) = 0 [pid 6408] <... openat resumed>) = 3 [pid 6403] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6408] chdir("./bus" [pid 6403] <... futex resumed>) = 0 [pid 6411] <... set_robust_list resumed>) = 0 [pid 6408] <... chdir resumed>) = 0 [pid 6403] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] rt_sigprocmask(SIG_SETMASK, [], [pid 6410] write(3, "1000", 4 [pid 6408] ioctl(4, LOOP_CLR_FD [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6408] <... ioctl resumed>) = 0 [pid 6410] <... write resumed>) = 4 [pid 6408] close(4) = 0 [pid 6410] close(3 [pid 5070] <... openat resumed>) = 3 [pid 6408] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... close resumed>) = 0 [pid 6408] <... futex resumed>) = 1 [pid 6407] <... futex resumed>) = 0 [pid 6410] symlink("/dev/binderfs", "./binderfs" [ 141.175829][ T6405] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.184474][ T6406] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.207600][ T6405] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6408] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6407] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6410] <... symlink resumed>) = 0 [pid 6408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = 0 [pid 6411] creat("./file1", 000 [pid 6408] creat("./bus", 000 [pid 6407] <... futex resumed>) = 0 [pid 6408] <... creat resumed>) = 4 [pid 6407] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6408] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6407] <... futex resumed>) = 0 [pid 6408] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6407] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6407] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... close resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6410] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 ./strace-static-x86_64: Process 6412 attached [pid 6410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] newfstatat(AT_FDCWD, "./72/bus", [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6412 [pid 6412] set_robust_list(0x555555fbc6a0, 24 [pid 6410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6403] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./72/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6412] <... set_robust_list resumed>) = 0 [pid 6410] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... openat resumed>) = 4 [pid 6410] <... mprotect resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 6412] chdir("./74" [pid 6410] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 141.221520][ T6406] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.238751][ T6406] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.252884][ T6408] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.260212][ T6408] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] getdents64(4, [pid 6412] <... chdir resumed>) = 0 [pid 6410] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6413 attached [pid 6412] setpgid(0, 0 [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 6413] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6412] <... setpgid resumed>) = 0 [pid 6410] <... clone3 resumed> => {parent_tid=[6413]}, 88) = 6413 [pid 6407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] rmdir("./72/bus" [pid 6412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6410] rt_sigprocmask(SIG_SETMASK, [], [pid 6407] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 6413] <... rseq resumed>) = 0 [pid 6410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6413] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6410] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... set_robust_list resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 6407] <... futex resumed>) = 0 [pid 5065] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] rt_sigprocmask(SIG_SETMASK, [], [pid 6410] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6413] memfd_create("syzkaller", 0 [pid 6407] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6412] <... openat resumed>) = 3 [pid 6412] write(3, "1000", 4 [pid 6409] <... creat resumed>) = 5 [pid 6407] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6409] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6407] <... mprotect resumed>) = 0 [pid 5065] unlink("./72/binderfs" [pid 6409] <... futex resumed>) = 0 [pid 6409] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6407] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... unlink resumed>) = 0 [pid 6413] <... memfd_create resumed>) = 3 [pid 6412] <... write resumed>) = 4 [pid 6407] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6412] close(3) = 0 [pid 6412] symlink("/dev/binderfs", "./binderfs" [pid 6413] <... mmap resumed>) = 0x7efd74b1c000 [pid 6412] <... symlink resumed>) = 0 [pid 6407] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] getdents64(3, [pid 6407] <... clone3 resumed> => {parent_tid=[6414]}, 88) = 6414 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5065] close(3 [pid 6407] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] <... close resumed>) = 0 [pid 6407] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 141.271640][ T6405] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.294734][ T6406] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.316249][ T6405] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] rmdir("./72"./strace-static-x86_64: Process 6414 attached [pid 6412] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 6414] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6412] <... futex resumed>) = 0 [pid 5065] mkdir("./73", 0777 [pid 6412] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6414] <... rseq resumed>) = 0 [pid 6412] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6414] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6414] <... set_robust_list resumed>) = 0 [pid 6412] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] <... openat resumed>) = 3 [pid 6414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6414] creat("./file1", 000 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6412] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5065] close(3 [pid 6412] <... mprotect resumed>) = 0 [pid 6412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6412] <... clone3 resumed> => {parent_tid=[6415]}, 88) = 6415 [pid 6412] rt_sigprocmask(SIG_SETMASK, [], [pid 6411] <... creat resumed>) = 5 [pid 6406] <... write resumed>) = 57344 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6416 [pid 6412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6411] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6406] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... futex resumed>) = 0 [pid 6406] <... futex resumed>) = 0 [pid 6412] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6406] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6416 attached [pid 6412] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6416] set_robust_list(0x555555fbc6a0, 24 [pid 6403] exit_group(0./strace-static-x86_64: Process 6415 attached [pid 6411] <... futex resumed>) = ? [pid 6406] <... futex resumed>) = ? [pid 6403] <... exit_group resumed>) = ? [pid 6416] <... set_robust_list resumed>) = 0 [pid 6415] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6411] +++ exited with 0 +++ [pid 6406] +++ exited with 0 +++ [pid 6403] +++ exited with 0 +++ [pid 6416] chdir("./73" [pid 6413] <... write resumed>) = 524288 [pid 6416] <... chdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6403, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5068] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6405] <... write resumed>) = 57344 [pid 6405] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6416] <... prctl resumed>) = 0 [pid 6405] <... futex resumed>) = 0 [pid 6401] exit_group(0 [pid 5068] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6416] setpgid(0, 0 [pid 6409] <... futex resumed>) = ? [pid 6401] <... exit_group resumed>) = ? [ 141.333795][ T6406] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.350103][ T6408] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.357941][ T6405] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6416] <... setpgid resumed>) = 0 [pid 6415] <... rseq resumed>) = 0 [pid 6409] +++ exited with 0 +++ [pid 6407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6405] +++ exited with 0 +++ [pid 6401] +++ exited with 0 +++ [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 6415] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6401, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6415] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6416] <... openat resumed>) = 3 [pid 6415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6413] munmap(0x7efd74b1c000, 138412032 [pid 6416] write(3, "1000", 4 [pid 5069] <... restart_syscall resumed>) = 0 [pid 6416] <... write resumed>) = 4 [pid 6416] close(3) = 0 [pid 6413] <... munmap resumed>) = 0 [pid 6416] symlink("/dev/binderfs", "./binderfs" [pid 6415] memfd_create("syzkaller", 0 [pid 5069] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 6416] <... symlink resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6416] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6416] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6416] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5069] newfstatat(3, "", [pid 6416] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] getdents64(3, [pid 6416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6415] <... memfd_create resumed>) = 3 [pid 6413] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 141.380430][ T6408] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6416] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6414] <... creat resumed>) = 5 [pid 6413] <... openat resumed>) = 4 [pid 5068] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6416] <... mprotect resumed>) = 0 [pid 6414] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6415] <... mmap resumed>) = 0x7efd74b1c000 [pid 6414] <... futex resumed>) = 0 [pid 6413] ioctl(4, LOOP_SET_FD, 3 [pid 6416] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6414] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6417 attached [pid 6416] <... clone3 resumed> => {parent_tid=[6417]}, 88) = 6417 [pid 6417] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6416] rt_sigprocmask(SIG_SETMASK, [], [pid 6417] <... rseq resumed>) = 0 [pid 6416] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6416] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... set_robust_list resumed>) = 0 [pid 6416] <... futex resumed>) = 0 [pid 6417] rt_sigprocmask(SIG_SETMASK, [], [pid 6416] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6417] memfd_create("syzkaller", 0) = 3 [pid 6417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6415] <... write resumed>) = 524288 [pid 6413] <... ioctl resumed>) = 0 [pid 6417] <... write resumed>) = 524288 [pid 6413] close(3 [pid 5069] <... umount2 resumed>) = 0 [pid 5069] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./73/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] <... close resumed>) = 0 [pid 6408] <... write resumed>) = 57344 [pid 6408] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] mkdir("./bus", 0777 [pid 6408] <... futex resumed>) = 0 [pid 6408] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6407] exit_group(0 [pid 6414] <... futex resumed>) = ? [pid 6413] <... mkdir resumed>) = 0 [pid 6408] <... futex resumed>) = ? [pid 6407] <... exit_group resumed>) = ? [pid 6414] +++ exited with 0 +++ [pid 6413] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6408] +++ exited with 0 +++ [pid 6407] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6407, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5069] <... openat resumed>) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 141.406202][ T58] hfsplus: b-tree write err: -5, ino 4 [ 141.416368][ T6413] loop1: detected capacity change from 0 to 1024 [ 141.417977][ T6408] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.423728][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 141.434341][ T6408] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6413] <... mount resumed>) = 0 [pid 5067] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6417] munmap(0x7efd74b1c000, 138412032 [pid 6415] munmap(0x7efd74b1c000, 138412032 [pid 5069] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6417] <... munmap resumed>) = 0 [pid 6415] <... munmap resumed>) = 0 [pid 6413] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6413] chdir("./bus" [pid 5069] getdents64(4, [pid 6413] <... chdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(3, "", [pid 6417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6415] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] close(4 [pid 6417] <... openat resumed>) = 4 [pid 6415] <... openat resumed>) = 4 [pid 6413] ioctl(4, LOOP_CLR_FD [pid 5069] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6413] <... ioctl resumed>) = 0 [pid 5069] rmdir("./73/bus" [pid 5067] getdents64(3, [pid 6417] ioctl(4, LOOP_SET_FD, 3 [pid 6415] ioctl(4, LOOP_SET_FD, 3 [pid 6413] close(4 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6413] <... close resumed>) = 0 [pid 5067] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6410] <... futex resumed>) = 0 [pid 5069] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./73/binderfs" [pid 6410] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... unlink resumed>) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./73" [pid 6413] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 1 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6413] creat("./bus", 000 [pid 6410] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6413] <... creat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6413] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] newfstatat(AT_FDCWD, "./74/bus", [pid 6417] <... ioctl resumed>) = 0 [pid 6413] <... futex resumed>) = 1 [pid 6410] <... futex resumed>) = 0 [pid 5069] mkdir("./74", 0777 [pid 6417] close(3 [pid 6410] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6417] <... close resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 6417] mkdir("./bus", 0777 [pid 6413] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6410] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6417] <... mkdir resumed>) = 0 [pid 6415] <... ioctl resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6417] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6415] close(3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6415] <... close resumed>) = 0 [pid 5069] close(3 [pid 6415] mkdir("./bus", 0777 [pid 5069] <... close resumed>) = 0 [pid 6415] <... mkdir resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... openat resumed>) = 4 [pid 5068] newfstatat(4, "", [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6418 [pid 6415] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6418 attached [pid 5068] getdents64(4, [pid 6418] set_robust_list(0x555555fbc6a0, 24 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6418] <... set_robust_list resumed>) = 0 [pid 5068] getdents64(4, [pid 6418] chdir("./74" [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./74/bus" [pid 6418] <... chdir resumed>) = 0 [pid 6418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6418] setpgid(0, 0) = 0 [pid 6418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... rmdir resumed>) = 0 [pid 6418] <... openat resumed>) = 3 [ 141.524134][ T6417] loop0: detected capacity change from 0 to 1024 [ 141.531998][ T6415] loop5: detected capacity change from 0 to 1024 [ 141.544956][ T47] hfsplus: b-tree write err: -5, ino 4 [ 141.565386][ T6413] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6418] write(3, "1000", 4) = 4 [pid 6417] <... mount resumed>) = 0 [pid 6415] <... mount resumed>) = 0 [pid 6410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 6415] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6415] <... openat resumed>) = 3 [pid 6410] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6415] chdir("./bus" [pid 6410] <... futex resumed>) = 0 [pid 6417] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6415] <... chdir resumed>) = 0 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6417] <... openat resumed>) = 3 [pid 6415] ioctl(4, LOOP_CLR_FD [pid 6410] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] unlink("./74/binderfs" [pid 6415] <... ioctl resumed>) = 0 [pid 6415] close(4) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6415] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] getdents64(3, [pid 6418] close(3 [pid 6417] chdir("./bus" [pid 6415] <... futex resumed>) = 1 [pid 6412] <... futex resumed>) = 0 [pid 6418] <... close resumed>) = 0 [pid 6417] <... chdir resumed>) = 0 [pid 6415] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... mprotect resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6418] symlink("/dev/binderfs", "./binderfs" [pid 6417] ioctl(4, LOOP_CLR_FD [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] <... futex resumed>) = 0 [pid 6418] <... symlink resumed>) = 0 [pid 6417] <... ioctl resumed>) = 0 [pid 6415] creat("./bus", 000 [pid 6412] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] close(3 [pid 6418] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] close(4 [pid 6415] <... creat resumed>) = 4 [pid 6410] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6417] <... close resumed>) = 0 [pid 6415] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./72/bus", ./strace-static-x86_64: Process 6419 attached [pid 6418] <... futex resumed>) = 0 [pid 6417] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... futex resumed>) = 1 [pid 6412] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6419] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6418] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6417] <... futex resumed>) = 1 [pid 6416] <... futex resumed>) = 0 [pid 6415] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6412] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./72/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6419] <... rseq resumed>) = 0 [pid 6418] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6417] creat("./bus", 000 [pid 6416] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./74" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6419] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6417] <... creat resumed>) = 4 [pid 6412] <... futex resumed>) = 0 [pid 6410] <... clone3 resumed> => {parent_tid=[6419]}, 88) = 6419 [pid 6418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6416] <... futex resumed>) = 0 [pid 6412] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] openat(AT_FDCWD, "./72/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6419] <... set_robust_list resumed>) = 0 [ 141.591247][ T6413] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.600689][ T6413] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.619581][ T6413] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6416] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6419] rt_sigprocmask(SIG_SETMASK, [], [pid 6418] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6417] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 6419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6418] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6417] <... futex resumed>) = 1 [pid 6416] <... futex resumed>) = 0 [pid 6419] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6418] <... mprotect resumed>) = 0 [pid 6417] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6416] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6416] <... futex resumed>) = 0 [pid 5068] mkdir("./75", 0777 [pid 5067] newfstatat(4, "", [pid 6416] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mkdir resumed>) = 0 [pid 6410] <... futex resumed>) = 1 [pid 6418] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6410] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6419] <... futex resumed>) = 0 [pid 6418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6419] creat("./file1", 000 [pid 5068] <... openat resumed>) = 3 [pid 6418] <... clone3 resumed> => {parent_tid=[6420]}, 88) = 6420 [pid 6412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6412] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] rt_sigprocmask(SIG_SETMASK, [], [pid 6412] <... futex resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(4, [pid 6418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] getdents64(4, [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [ 141.638623][ T6415] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.653204][ T6417] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.660539][ T6417] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.673413][ T6413] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.680805][ T6413] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] close(4./strace-static-x86_64: Process 6420 attached [pid 6418] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... close resumed>) = 0 [pid 6420] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 5067] rmdir("./72/bus" [pid 6418] <... futex resumed>) = 0 [pid 6412] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6418] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6412] <... mprotect resumed>) = 0 [pid 6412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6420] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6412] <... clone3 resumed> => {parent_tid=[6421]}, 88) = 6421 [pid 6420] <... set_robust_list resumed>) = 0 [pid 5067] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6420] rt_sigprocmask(SIG_SETMASK, [], [pid 6412] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] newfstatat(AT_FDCWD, "./72/binderfs", [pid 6412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6412] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6420] memfd_create("syzkaller", 0 [pid 6412] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] unlink("./72/binderfs"./strace-static-x86_64: Process 6421 attached [pid 6421] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6421] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6421] creat("./file1", 000 [pid 6420] <... memfd_create resumed>) = 3 [pid 6420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6422 attached [pid 6419] <... creat resumed>) = 5 [pid 6416] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6413] <... write resumed>) = 57344 [pid 6410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6422 [pid 5067] getdents64(3, [pid 6416] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... futex resumed>) = 0 [pid 6413] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6419] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6413] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] set_robust_list(0x555555fbc6a0, 24 [pid 6420] <... mmap resumed>) = 0x7efd74b1c000 [pid 6419] <... futex resumed>) = 0 [pid 6416] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] close(3 [pid 6419] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./72" [pid 6416] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6410] exit_group(0 [pid 6419] <... futex resumed>) = ? [pid 6416] <... mprotect resumed>) = 0 [pid 6413] <... futex resumed>) = ? [pid 6410] <... exit_group resumed>) = ? [pid 6422] <... set_robust_list resumed>) = 0 [pid 6422] chdir("./75" [pid 6419] +++ exited with 0 +++ [pid 6416] rt_sigprocmask(SIG_BLOCK, ~[], [ 141.692417][ T6415] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.700037][ T6415] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.717982][ T6417] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.726589][ T6415] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6413] +++ exited with 0 +++ [pid 6410] +++ exited with 0 +++ [pid 6416] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6410, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6416] <... clone3 resumed> => {parent_tid=[6423]}, 88) = 6423 ./strace-static-x86_64: Process 6423 attached [pid 6416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6416] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6416] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... restart_syscall resumed>) = 0 [pid 6423] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6421] <... creat resumed>) = 5 [pid 6423] <... rseq resumed>) = 0 [pid 6421] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6423] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6421] <... futex resumed>) = 1 [pid 6412] <... futex resumed>) = 0 [pid 6423] <... set_robust_list resumed>) = 0 [pid 6423] rt_sigprocmask(SIG_SETMASK, [], [pid 6422] <... chdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6421] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5067] mkdir("./73", 0777 [pid 5066] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6423] creat("./file1", 000 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6422] <... prctl resumed>) = 0 [pid 6420] <... write resumed>) = 524288 [pid 5066] newfstatat(3, "", [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6422] setpgid(0, 0 [pid 5067] ioctl(3, LOOP_CLR_FD [ 141.736499][ T6417] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.758018][ T6415] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.768795][ T6417] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.781930][ T6415] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] getdents64(3, [pid 6422] <... setpgid resumed>) = 0 [pid 6422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6422] <... openat resumed>) = 3 [pid 6415] <... write resumed>) = 57344 [pid 5067] close(3 [pid 5066] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6415] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... close resumed>) = 0 [pid 6415] <... futex resumed>) = 0 [pid 6412] exit_group(0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6422] write(3, "1000", 4 [pid 6421] <... futex resumed>) = ? [pid 6416] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6412] <... exit_group resumed>) = ? [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6424 [pid 6422] <... write resumed>) = 4 [pid 6422] close(3 [pid 6421] +++ exited with 0 +++ [pid 6415] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ [pid 6422] <... close resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6412, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6422] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6424 attached ) = 0 [pid 6424] set_robust_list(0x555555fbc6a0, 24 [pid 6422] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] munmap(0x7efd74b1c000, 138412032 [pid 5070] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 6424] <... set_robust_list resumed>) = 0 [pid 6422] <... futex resumed>) = 0 [pid 6420] <... munmap resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6422] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6424] chdir("./73" [pid 6420] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6422] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 141.791329][ T6417] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.803387][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 5070] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6424] <... chdir resumed>) = 0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6420] <... openat resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 6424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6422] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6420] ioctl(4, LOOP_SET_FD, 3 [pid 5070] newfstatat(3, "", [pid 6424] <... prctl resumed>) = 0 [pid 6422] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6424] setpgid(0, 0) = 0 [pid 6424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6423] <... creat resumed>) = 5 [pid 6417] <... write resumed>) = 57344 [pid 6423] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6423] <... futex resumed>) = 0 [pid 6417] <... futex resumed>) = 0 [pid 6423] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] exit_group(0 [pid 6423] <... futex resumed>) = ? [pid 6417] <... futex resumed>) = ? [pid 6416] <... exit_group resumed>) = ? [pid 6423] +++ exited with 0 +++ [pid 6417] +++ exited with 0 +++ [pid 6416] +++ exited with 0 +++ [pid 6422] <... mprotect resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6416, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6424] <... openat resumed>) = 3 [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] getdents64(3, [pid 5066] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 6422] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6424] write(3, "1000", 4 [pid 5070] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6424] <... write resumed>) = 4 [pid 5066] newfstatat(AT_FDCWD, "./74/bus", [pid 6424] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] <... close resumed>) = 0 [pid 5066] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6420] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 6424] <... symlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5065] getdents64(3, [pid 5066] newfstatat(4, "", [pid 6420] close(3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6420] <... close resumed>) = 0 [pid 6424] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] mkdir("./bus", 0777 [pid 5066] getdents64(4, [pid 5065] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6424] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] getdents64(4, [pid 6424] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6424] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] close(4 [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] rmdir("./74/bus" [pid 6424] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... rmdir resumed>) = 0 [pid 6424] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6424] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] newfstatat(AT_FDCWD, "./74/binderfs", ./strace-static-x86_64: Process 6425 attached {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./74/binderfs" [pid 6425] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6424] <... clone3 resumed> => {parent_tid=[6425]}, 88) = 6425 [pid 5066] <... unlink resumed>) = 0 [pid 6425] <... rseq resumed>) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], [pid 6420] <... mkdir resumed>) = 0 [pid 6425] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6425] <... set_robust_list resumed>) = 0 [pid 5066] getdents64(3, [pid 6425] rt_sigprocmask(SIG_SETMASK, [], [pid 6424] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6424] <... futex resumed>) = 0 [pid 5066] close(3 [pid 6424] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6426 attached [pid 6425] memfd_create("syzkaller", 0 [pid 5066] <... close resumed>) = 0 [pid 6426] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6425] <... memfd_create resumed>) = 3 [pid 5066] rmdir("./74" [pid 6426] <... rseq resumed>) = 0 [pid 6425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6425] <... mmap resumed>) = 0x7efd74b1c000 [pid 6422] <... clone3 resumed> => {parent_tid=[6426]}, 88) = 6426 [pid 6426] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6420] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6426] <... set_robust_list resumed>) = 0 [pid 6425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] mkdir("./75", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6426] rt_sigprocmask(SIG_SETMASK, [], [pid 6422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 6426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6422] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6427 [pid 6426] memfd_create("syzkaller", 0 [pid 6422] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6427 attached [pid 6427] set_robust_list(0x555555fbc6a0, 24 [pid 6422] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6426] <... memfd_create resumed>) = 3 [pid 6426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6427] <... set_robust_list resumed>) = 0 [pid 6426] <... mmap resumed>) = 0x7efd74b1c000 [pid 6427] chdir("./75") = 0 [pid 6420] <... mount resumed>) = 0 [pid 6427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6420] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6427] <... prctl resumed>) = 0 [pid 6420] <... openat resumed>) = 3 [pid 6427] setpgid(0, 0 [pid 6420] chdir("./bus" [pid 6427] <... setpgid resumed>) = 0 [pid 6420] <... chdir resumed>) = 0 [pid 6427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 141.849395][ T6420] loop4: detected capacity change from 0 to 1024 [ 141.874675][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 141.889952][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6420] ioctl(4, LOOP_CLR_FD [pid 6427] <... openat resumed>) = 3 [pid 6425] <... write resumed>) = 524288 [pid 6420] <... ioctl resumed>) = 0 [pid 6427] write(3, "1000", 4) = 4 [pid 6427] close(3) = 0 [pid 6420] close(4 [pid 6427] symlink("/dev/binderfs", "./binderfs" [pid 6420] <... close resumed>) = 0 [pid 6420] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... symlink resumed>) = 0 [pid 6420] <... futex resumed>) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6420] creat("./bus", 000 [pid 6418] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] <... creat resumed>) = 4 [pid 6418] <... futex resumed>) = 0 [pid 6418] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6427] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] munmap(0x7efd74b1c000, 138412032 [pid 6427] <... futex resumed>) = 0 [pid 6427] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6425] <... munmap resumed>) = 0 [pid 6420] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6427] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6420] <... futex resumed>) = 1 [pid 6418] <... futex resumed>) = 0 [pid 6418] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6420] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6418] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6427] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6425] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6427] <... mprotect resumed>) = 0 [pid 6425] <... openat resumed>) = 4 [pid 6427] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6425] ioctl(4, LOOP_SET_FD, 3 [pid 6426] <... write resumed>) = 524288 [pid 5070] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6428]}, 88) = 6428 [pid 6427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6427] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6427] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6428 attached [pid 5070] newfstatat(AT_FDCWD, "./74/bus", [pid 6428] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6428] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5070] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6428] <... set_robust_list resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6428] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... openat resumed>) = 4 [pid 6425] <... ioctl resumed>) = 0 [pid 6428] memfd_create("syzkaller", 0 [pid 5070] newfstatat(4, "", [pid 6425] close(3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6428] <... memfd_create resumed>) = 3 [pid 6426] munmap(0x7efd74b1c000, 138412032 [pid 6425] <... close resumed>) = 0 [pid 5070] getdents64(4, [pid 6428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6425] mkdir("./bus", 0777 [pid 6428] <... mmap resumed>) = 0x7efd74b1c000 [pid 6426] <... munmap resumed>) = 0 [pid 6425] <... mkdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6425] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(AT_FDCWD, "./73/bus", [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] close(4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6418] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5065] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... futex resumed>) = 0 [pid 5070] rmdir("./74/bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6425] <... mount resumed>) = 0 [pid 6418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6425] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6418] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6426] <... openat resumed>) = 4 [pid 6425] <... openat resumed>) = 3 [pid 6418] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 6426] ioctl(4, LOOP_SET_FD, 3 [pid 6425] chdir("./bus" [pid 6418] <... mprotect resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5065] newfstatat(4, "", [pid 6425] <... chdir resumed>) = 0 [pid 6418] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6425] ioctl(4, LOOP_CLR_FD [pid 6418] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] getdents64(4, [pid 6425] <... ioctl resumed>) = 0 [pid 6418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6429 attached [pid 6425] close(4 [ 141.958664][ T6420] hfsplus: request for non-existent node 16715520 in B*Tree [ 141.966468][ T6425] loop2: detected capacity change from 0 to 1024 [pid 5065] getdents64(4, [pid 6429] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6425] <... close resumed>) = 0 [pid 6418] <... clone3 resumed> => {parent_tid=[6429]}, 88) = 6429 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6429] <... rseq resumed>) = 0 [pid 6425] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] unlink("./74/binderfs" [pid 5065] close(4 [pid 6429] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6425] <... futex resumed>) = 1 [pid 6424] <... futex resumed>) = 0 [pid 6418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6429] <... set_robust_list resumed>) = 0 [pid 6425] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 6429] rt_sigprocmask(SIG_SETMASK, [], [pid 6425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6424] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = 0 [pid 5065] rmdir("./73/bus" [pid 6429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6425] creat("./bus", 000 [pid 6424] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6418] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6429] creat("./file1", 000 [pid 6425] <... creat resumed>) = 4 [pid 5070] close(3 [pid 6425] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6425] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6424] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./73/binderfs", [pid 6424] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./73/binderfs" [pid 6425] <... futex resumed>) = 0 [pid 6424] <... futex resumed>) = 1 [pid 5065] <... unlink resumed>) = 0 [pid 6425] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6424] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6428] <... write resumed>) = 524288 [pid 6426] <... ioctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5065] close(3 [pid 5070] rmdir("./74" [pid 6426] close(3 [pid 5065] <... close resumed>) = 0 [pid 6426] <... close resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] rmdir("./73" [pid 6426] mkdir("./bus", 0777 [pid 5070] mkdir("./75", 0777 [pid 6428] munmap(0x7efd74b1c000, 138412032 [pid 6426] <... mkdir resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./74", 0777) = 0 [ 142.006445][ T6426] loop3: detected capacity change from 0 to 1024 [ 142.025614][ T6420] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.048575][ T6425] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6428] <... munmap resumed>) = 0 [pid 6426] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6428] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6430 [pid 6428] <... openat resumed>) = 4 [pid 5070] close(3./strace-static-x86_64: Process 6430 attached [pid 6430] set_robust_list(0x555555fbc6a0, 24 [pid 5070] <... close resumed>) = 0 [pid 6430] <... set_robust_list resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6430] chdir("./74") = 0 [pid 6430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6431 attached [pid 6428] ioctl(4, LOOP_SET_FD, 3 [pid 6426] <... mount resumed>) = 0 [pid 6430] setpgid(0, 0 [pid 6424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6430] <... setpgid resumed>) = 0 [pid 6424] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6424] <... futex resumed>) = 0 [pid 6424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6424] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6431 [ 142.064495][ T6420] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.087411][ T6425] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.095525][ T6420] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.103952][ T6428] loop1: detected capacity change from 0 to 1024 [pid 6430] <... openat resumed>) = 3 [pid 6424] <... mprotect resumed>) = 0 [pid 6430] write(3, "1000", 4 [pid 6424] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6430] <... write resumed>) = 4 [pid 6424] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6430] close(3 [pid 6424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6430] <... close resumed>) = 0 ./strace-static-x86_64: Process 6432 attached [pid 6430] symlink("/dev/binderfs", "./binderfs" [pid 6424] <... clone3 resumed> => {parent_tid=[6432]}, 88) = 6432 [pid 6432] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6430] <... symlink resumed>) = 0 [pid 6424] rt_sigprocmask(SIG_SETMASK, [], [pid 6432] <... rseq resumed>) = 0 [pid 6431] set_robust_list(0x555555fbc6a0, 24 [pid 6430] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6432] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6431] <... set_robust_list resumed>) = 0 [pid 6430] <... futex resumed>) = 0 [pid 6429] <... creat resumed>) = 5 [pid 6428] <... ioctl resumed>) = 0 [pid 6426] <... openat resumed>) = 3 [pid 6431] chdir("./75" [pid 6429] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] close(3 [pid 6426] chdir("./bus" [pid 6432] <... set_robust_list resumed>) = 0 [pid 6430] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6429] <... futex resumed>) = 0 [pid 6424] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6429] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] <... futex resumed>) = 0 [pid 6424] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6432] rt_sigprocmask(SIG_SETMASK, [], [pid 6430] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6432] creat("./file1", 000 [pid 6430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6431] <... chdir resumed>) = 0 [pid 6428] <... close resumed>) = 0 [pid 6426] <... chdir resumed>) = 0 [pid 6428] mkdir("./bus", 0777 [pid 6426] ioctl(4, LOOP_CLR_FD [pid 6431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6426] <... ioctl resumed>) = 0 [pid 6430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6431] setpgid(0, 0 [pid 6430] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6428] <... mkdir resumed>) = 0 [pid 6426] close(4 [pid 6431] <... setpgid resumed>) = 0 [pid 6426] <... close resumed>) = 0 [pid 6431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6430] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6426] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6430] <... mprotect resumed>) = 0 [pid 6426] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6431] <... openat resumed>) = 3 [pid 6430] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6426] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6422] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] write(3, "1000", 4 [pid 6430] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6426] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6422] <... futex resumed>) = 0 [pid 6431] <... write resumed>) = 4 [pid 6430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6426] creat("./bus", 000 [pid 6422] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6431] close(3 [pid 6428] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6430] <... clone3 resumed> => {parent_tid=[6433]}, 88) = 6433 [pid 6431] <... close resumed>) = 0 [pid 6430] rt_sigprocmask(SIG_SETMASK, [], [pid 6426] <... creat resumed>) = 4 ./strace-static-x86_64: Process 6433 attached [pid 6431] symlink("/dev/binderfs", "./binderfs" [pid 6430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6430] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] <... rseq resumed>) = 0 [pid 6430] <... futex resumed>) = 0 [pid 6433] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6430] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6431] <... symlink resumed>) = 0 [pid 6433] <... set_robust_list resumed>) = 0 [pid 6431] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6426] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] rt_sigprocmask(SIG_SETMASK, [], [pid 6431] <... futex resumed>) = 0 [pid 6433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6431] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6426] <... futex resumed>) = 1 [pid 6422] <... futex resumed>) = 0 [pid 6433] memfd_create("syzkaller", 0) = 3 [pid 6433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [ 142.111927][ T6425] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.119246][ T6425] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.129269][ T6420] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6432] <... creat resumed>) = 5 [pid 6431] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6428] <... mount resumed>) = 0 [pid 6426] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6424] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6422] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6422] <... futex resumed>) = 0 [pid 6432] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6428] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6422] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6432] <... futex resumed>) = 0 [pid 6428] <... openat resumed>) = 3 [pid 6431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6432] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6431] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6428] chdir("./bus" [pid 6431] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6428] <... chdir resumed>) = 0 [pid 6433] <... write resumed>) = 524288 [pid 6431] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6428] ioctl(4, LOOP_CLR_FD [pid 6433] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6433] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 142.163604][ T6420] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.173094][ T6425] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.193223][ T6426] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.200556][ T6426] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6433] ioctl(4, LOOP_SET_FD, 3 [pid 6431] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6428] <... ioctl resumed>) = 0 [pid 6420] <... write resumed>) = 57344 [pid 6431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6428] close(4) = 0 ./strace-static-x86_64: Process 6434 attached [pid 6431] <... clone3 resumed> => {parent_tid=[6434]}, 88) = 6434 [pid 6428] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6431] rt_sigprocmask(SIG_SETMASK, [], [pid 6428] <... futex resumed>) = 1 [pid 6427] <... futex resumed>) = 0 [pid 6420] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... rseq resumed>) = 0 [pid 6431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6428] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6420] <... futex resumed>) = 0 [pid 6418] exit_group(0 [pid 6434] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6431] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6427] <... futex resumed>) = 0 [pid 6434] <... set_robust_list resumed>) = 0 [pid 6431] <... futex resumed>) = 0 [pid 6429] <... futex resumed>) = ? [pid 6428] creat("./bus", 000 [pid 6427] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6418] <... exit_group resumed>) = ? [pid 6434] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] <... ioctl resumed>) = 0 [pid 6431] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6429] +++ exited with 0 +++ [pid 6428] <... creat resumed>) = 4 [pid 6422] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] close(3 [pid 6425] <... write resumed>) = 57344 [pid 6433] <... close resumed>) = 0 [pid 6425] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] mkdir("./bus", 0777 [pid 6425] <... futex resumed>) = 0 [pid 6434] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] <... mkdir resumed>) = 0 [pid 6428] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6422] <... futex resumed>) = 0 [pid 6420] +++ exited with 0 +++ [pid 6418] +++ exited with 0 +++ [pid 6434] memfd_create("syzkaller", 0 [pid 6433] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6428] <... futex resumed>) = 1 [pid 6427] <... futex resumed>) = 0 [pid 6425] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6424] exit_group(0 [pid 6422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6434] <... memfd_create resumed>) = 3 [pid 6432] <... futex resumed>) = ? [pid 6428] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6427] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6425] <... futex resumed>) = ? [pid 6424] <... exit_group resumed>) = ? [pid 6422] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6418, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6434] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6432] +++ exited with 0 +++ [pid 6428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6427] <... futex resumed>) = 0 [pid 6425] +++ exited with 0 +++ [pid 6424] +++ exited with 0 +++ [pid 6422] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6434] <... mmap resumed>) = 0x7efd74b1c000 [pid 6428] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 142.205666][ T6425] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.222163][ T6433] loop0: detected capacity change from 0 to 1024 [pid 6427] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6422] <... mprotect resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6424, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6434] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6422] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6422] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] newfstatat(3, "", [pid 5067] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] <... mount resumed>) = 0 [pid 6422] <... clone3 resumed> => {parent_tid=[6435]}, 88) = 6435 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6435 attached [pid 6422] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] getdents64(3, [pid 5067] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6435] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6435] <... rseq resumed>) = 0 [pid 6434] <... write resumed>) = 524288 [pid 6433] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6422] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] newfstatat(3, "", [pid 6435] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6434] munmap(0x7efd74b1c000, 138412032 [pid 6422] <... futex resumed>) = 0 [pid 5069] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... set_robust_list resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 142.260501][ T6426] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.273808][ T6428] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.292051][ T6428] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.299769][ T6426] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6435] rt_sigprocmask(SIG_SETMASK, [], [pid 6434] <... munmap resumed>) = 0 [pid 6433] <... openat resumed>) = 3 [pid 6427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6422] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] getdents64(3, [pid 6435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6434] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6433] chdir("./bus" [pid 6427] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6435] creat("./file1", 000 [pid 6434] <... openat resumed>) = 4 [pid 6433] <... chdir resumed>) = 0 [pid 6427] <... futex resumed>) = 0 [pid 5067] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6434] ioctl(4, LOOP_SET_FD, 3 [pid 6433] ioctl(4, LOOP_CLR_FD [pid 6427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6433] <... ioctl resumed>) = 0 [pid 6427] <... mmap resumed>) = 0x7efd7cefb000 [pid 6433] close(4 [pid 6427] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6433] <... close resumed>) = 0 [pid 6427] <... mprotect resumed>) = 0 [pid 6433] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6433] <... futex resumed>) = 1 [pid 6430] <... futex resumed>) = 0 [pid 6427] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6433] creat("./bus", 000 [pid 6430] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6433] <... creat resumed>) = 4 [pid 6430] <... futex resumed>) = 0 [pid 6430] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6427] <... clone3 resumed> => {parent_tid=[6436]}, 88) = 6436 [ 142.312758][ T6428] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.325685][ T6426] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.325939][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 142.346534][ T6434] loop5: detected capacity change from 0 to 1024 [ 142.354320][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6427] rt_sigprocmask(SIG_SETMASK, [], [pid 6433] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6433] <... futex resumed>) = 1 [pid 6430] <... futex resumed>) = 0 [pid 6427] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6433] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6430] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6427] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6436 attached [pid 6430] <... futex resumed>) = 0 [pid 6427] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6434] <... ioctl resumed>) = 0 [pid 6430] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6436] <... rseq resumed>) = 0 [pid 6434] close(3) = 0 [pid 6436] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6434] mkdir("./bus", 0777 [pid 6422] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6436] <... set_robust_list resumed>) = 0 [pid 6434] <... mkdir resumed>) = 0 [pid 6430] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6427] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 142.362286][ T6428] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.363474][ T6426] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.381897][ T6433] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.389478][ T6433] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.405558][ T6428] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6430] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6430] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6437 attached [pid 6437] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6430] <... clone3 resumed> => {parent_tid=[6437]}, 88) = 6437 [pid 6437] <... rseq resumed>) = 0 [pid 6430] rt_sigprocmask(SIG_SETMASK, [], [pid 6437] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6436] rt_sigprocmask(SIG_SETMASK, [], [pid 6434] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6437] <... set_robust_list resumed>) = 0 [pid 6430] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6437] rt_sigprocmask(SIG_SETMASK, [], [pid 6430] <... futex resumed>) = 0 [pid 6437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6430] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6437] creat("./file1", 000 [pid 6436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6426] <... write resumed>) = 57344 [pid 6436] creat("./file1", 000 [pid 6426] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = 0 [pid 6426] <... futex resumed>) = 0 [pid 5069] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6437] <... creat resumed>) = 5 [pid 6436] <... creat resumed>) = 5 [pid 6435] <... creat resumed>) = 5 [pid 6434] <... mount resumed>) = 0 [pid 6428] <... write resumed>) = 57344 [pid 6426] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... umount2 resumed>) = 0 [pid 6437] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6436] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6437] <... futex resumed>) = 1 [pid 6436] <... futex resumed>) = 0 [pid 6434] <... openat resumed>) = 3 [pid 6430] <... futex resumed>) = 0 [pid 6437] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6436] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6435] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] chdir("./bus" [pid 6428] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... futex resumed>) = 0 [pid 6434] <... chdir resumed>) = 0 [pid 6428] <... futex resumed>) = 0 [pid 6427] exit_group(0 [pid 6422] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6436] <... futex resumed>) = ? [pid 6434] ioctl(4, LOOP_CLR_FD [pid 6427] <... exit_group resumed>) = ? [pid 6426] <... futex resumed>) = ? [pid 6422] <... exit_group resumed>) = ? [pid 5069] newfstatat(AT_FDCWD, "./74/bus", [pid 5067] newfstatat(AT_FDCWD, "./73/bus", [pid 6436] +++ exited with 0 +++ [pid 6435] +++ exited with 0 +++ [pid 6434] <... ioctl resumed>) = 0 [pid 6428] +++ exited with 0 +++ [pid 6427] +++ exited with 0 +++ [pid 6426] +++ exited with 0 +++ [pid 6422] +++ exited with 0 +++ [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6434] close(4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6434] <... close resumed>) = 0 [pid 5069] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6422, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6427, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [ 142.412369][ T6433] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.420238][ T6433] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.434014][ T6428] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.455589][ T6433] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6434] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6434] <... futex resumed>) = 1 [pid 6431] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6431] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(4, "", [pid 5066] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6431] <... futex resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 5068] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6434] creat("./bus", 000 [pid 6431] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(4, [pid 6434] <... creat resumed>) = 4 [pid 5069] getdents64(4, [pid 5068] getdents64(3, [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] newfstatat(3, "", [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] getdents64(4, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, [pid 5068] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6434] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(3, [pid 6434] <... futex resumed>) = 1 [pid 6431] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6434] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6431] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] close(4 [pid 5067] <... close resumed>) = 0 [pid 5066] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6431] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... close resumed>) = 0 [pid 5067] rmdir("./73/bus" [pid 5069] rmdir("./74/bus" [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./73/binderfs", [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] newfstatat(AT_FDCWD, "./74/binderfs", [pid 5067] unlink("./73/binderfs" [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5069] unlink("./74/binderfs" [pid 5067] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 5067] close(3 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5069] close(3 [pid 5067] rmdir("./73" [pid 5069] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5069] rmdir("./74" [pid 5067] mkdir("./74", 0777 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5069] mkdir("./75", 0777 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [ 142.490608][ T6433] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.522303][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 142.534587][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] <... close resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6433] <... write resumed>) = 57344 [pid 6431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6433] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6438 [pid 6433] <... futex resumed>) = 0 [pid 6431] <... futex resumed>) = 0 [pid 6431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6439 [pid 6431] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6431] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6431] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6440]}, 88) = 6440 [pid 6431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6431] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6440 attached ./strace-static-x86_64: Process 6438 attached ) = 0 [pid 6440] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6438] set_robust_list(0x555555fbc6a0, 24 [pid 6431] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] <... rseq resumed>) = 0 [pid 6438] <... set_robust_list resumed>) = 0 [pid 6440] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6438] chdir("./74" [pid 6440] <... set_robust_list resumed>) = 0 [pid 6438] <... chdir resumed>) = 0 [pid 6440] rt_sigprocmask(SIG_SETMASK, [], [pid 6438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6438] <... prctl resumed>) = 0 [pid 6433] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6439 attached [pid 6440] creat("./file1", 000 [pid 6438] setpgid(0, 0 [pid 6430] exit_group(0 [pid 5068] newfstatat(AT_FDCWD, "./75/bus", [pid 5066] <... umount2 resumed>) = 0 [pid 6439] set_robust_list(0x555555fbc6a0, 24 [pid 6438] <... setpgid resumed>) = 0 [pid 6437] <... futex resumed>) = ? [pid 6433] <... futex resumed>) = ? [pid 6430] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6437] +++ exited with 0 +++ [pid 5068] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] <... openat resumed>) = 3 [pid 6438] write(3, "1000", 4) = 4 [pid 6438] close(3) = 0 [pid 6433] +++ exited with 0 +++ [pid 6430] +++ exited with 0 +++ [pid 6438] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6430, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6439] <... set_robust_list resumed>) = 0 [pid 6438] <... symlink resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6438] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 142.554494][ T6434] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.581434][ T6434] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.590188][ T6434] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6438] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] newfstatat(AT_FDCWD, "./75/bus", [pid 6438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] <... clone3 resumed> => {parent_tid=[6441]}, 88) = 6441 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6438] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6441 attached [pid 6439] chdir("./75" [pid 6438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] newfstatat(4, "", [pid 5066] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6438] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 6438] <... futex resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 5065] <... openat resumed>) = 3 [pid 6441] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6439] <... chdir resumed>) = 0 [pid 6438] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] newfstatat(3, "", [pid 6441] <... rseq resumed>) = 0 [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] getdents64(4, [pid 6441] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6439] <... prctl resumed>) = 0 [pid 6431] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6441] <... set_robust_list resumed>) = 0 [pid 5065] getdents64(3, [pid 6441] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] getdents64(4, [pid 6441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6439] setpgid(0, 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6441] memfd_create("syzkaller", 0 [pid 6439] <... setpgid resumed>) = 0 [pid 5068] close(4 [pid 5066] getdents64(4, [pid 5068] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] rmdir("./75/bus" [pid 5065] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6441] <... memfd_create resumed>) = 3 [pid 6439] <... openat resumed>) = 3 [pid 5066] close(4 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./75/bus") = 0 [pid 6441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6439] write(3, "1000", 4 [pid 5068] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6441] <... mmap resumed>) = 0x7efd74b1c000 [pid 6439] <... write resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6439] close(3 [pid 5066] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./75/binderfs" [pid 6441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6439] <... close resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./75/binderfs", [pid 5066] <... unlink resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6439] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] unlink("./75/binderfs" [pid 6439] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 6439] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] getdents64(3, [pid 6439] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6439] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] close(3 [pid 5066] close(3 [pid 6440] <... creat resumed>) = 5 [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... close resumed>) = 0 [pid 6440] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5068] rmdir("./75" [pid 5066] <... close resumed>) = 0 [pid 6440] <... futex resumed>) = 0 [pid 6439] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] rmdir("./75" [pid 6440] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] <... mprotect resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6439] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] mkdir("./76", 0777 [pid 5066] mkdir("./76", 0777 [pid 6439] <... rt_sigprocmask resumed>[], 8) = 0 [ 142.621227][ T6434] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.653384][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 5066] <... mkdir resumed>) = 0 [pid 6441] <... write resumed>) = 524288 [pid 6439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6442 attached [pid 6441] munmap(0x7efd74b1c000, 138412032 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 6442] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6441] <... munmap resumed>) = 0 [pid 6442] <... rseq resumed>) = 0 [pid 6441] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6439] <... clone3 resumed> => {parent_tid=[6442]}, 88) = 6442 [pid 5068] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6441] <... openat resumed>) = 4 [pid 6439] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6442] <... set_robust_list resumed>) = 0 [pid 6441] ioctl(4, LOOP_SET_FD, 3 [pid 6439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6434] <... write resumed>) = 57344 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] newfstatat(AT_FDCWD, "./74/bus", [pid 6442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] close(3 [pid 6442] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] <... ioctl resumed>) = 0 [pid 6439] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6431] exit_group(0 [pid 5068] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6440] <... futex resumed>) = ? [pid 6431] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6443 attached [pid 6440] +++ exited with 0 +++ [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6443 [pid 6443] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6443] chdir("./76") = 0 [pid 6439] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6441] close(3 [pid 6439] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6434] <... futex resumed>) = ? [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6442] memfd_create("syzkaller", 0 [pid 6441] <... close resumed>) = 0 [pid 6434] +++ exited with 0 +++ [pid 6431] +++ exited with 0 +++ [pid 6443] <... prctl resumed>) = 0 [pid 6443] setpgid(0, 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6431, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6441] mkdir("./bus", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6443] <... setpgid resumed>) = 0 [pid 5070] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6441] <... mkdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6442] <... memfd_create resumed>) = 3 [pid 6441] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6444 attached [pid 6443] <... openat resumed>) = 3 [pid 6444] set_robust_list(0x555555fbc6a0, 24 [pid 6443] write(3, "1000", 4 [pid 6444] <... set_robust_list resumed>) = 0 [pid 6443] <... write resumed>) = 4 [pid 6444] chdir("./76" [pid 6443] close(3 [pid 6444] <... chdir resumed>) = 0 [pid 6443] <... close resumed>) = 0 [pid 6444] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6443] symlink("/dev/binderfs", "./binderfs" [pid 6444] <... prctl resumed>) = 0 [pid 6443] <... symlink resumed>) = 0 [ 142.692702][ T6434] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.700042][ T6434] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.722194][ T6441] loop2: detected capacity change from 0 to 1024 [pid 6444] setpgid(0, 0) = 0 [pid 6443] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6443] <... futex resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 6444] <... openat resumed>) = 3 [pid 6443] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6441] <... mount resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6444 [pid 6443] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6442] <... mmap resumed>) = 0x7efd74b1c000 [pid 6441] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6444] write(3, "1000", 4 [pid 6443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6441] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 6444] <... write resumed>) = 4 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6444] close(3 [pid 6443] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6444] <... close resumed>) = 0 [pid 6444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6443] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6444] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6441] chdir("./bus" [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6445 attached [pid 6444] <... futex resumed>) = 0 [pid 6442] <... write resumed>) = 524288 [pid 6444] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6443] <... clone3 resumed> => {parent_tid=[6445]}, 88) = 6445 [pid 6444] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6443] rt_sigprocmask(SIG_SETMASK, [], [pid 6444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6445] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6445] <... rseq resumed>) = 0 [pid 6444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6443] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6444] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6445] <... set_robust_list resumed>) = 0 [pid 6444] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6443] <... futex resumed>) = 0 [pid 6445] rt_sigprocmask(SIG_SETMASK, [], [pid 6444] <... mprotect resumed>) = 0 [pid 6443] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6444] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6445] memfd_create("syzkaller", 0 [pid 6444] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6445] <... memfd_create resumed>) = 3 [pid 6444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6442] munmap(0x7efd74b1c000, 138412032 [pid 6441] <... chdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 6446 attached [pid 6445] <... mmap resumed>) = 0x7efd74b1c000 [pid 6444] <... clone3 resumed> => {parent_tid=[6446]}, 88) = 6446 [pid 6446] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6444] rt_sigprocmask(SIG_SETMASK, [], [pid 6442] <... munmap resumed>) = 0 [pid 6441] ioctl(4, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6446] <... rseq resumed>) = 0 [pid 6444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6441] <... ioctl resumed>) = 0 [pid 6446] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6444] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] close(4 [pid 5065] close(4 [pid 6446] <... set_robust_list resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6441] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6446] rt_sigprocmask(SIG_SETMASK, [], [pid 6444] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6442] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6441] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6441] <... futex resumed>) = 1 [pid 5065] rmdir("./74/bus" [pid 6438] <... futex resumed>) = 0 [pid 6446] memfd_create("syzkaller", 0 [pid 6445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6441] creat("./bus", 000 [pid 6438] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... openat resumed>) = 4 [ 142.759117][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 5065] <... rmdir resumed>) = 0 [pid 6446] <... memfd_create resumed>) = 3 [pid 6445] <... write resumed>) = 524288 [pid 6442] ioctl(4, LOOP_SET_FD, 3 [pid 6441] <... creat resumed>) = 4 [pid 6438] <... futex resumed>) = 0 [pid 5065] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6441] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6441] <... futex resumed>) = 0 [pid 6438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] newfstatat(AT_FDCWD, "./75/bus", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] <... ioctl resumed>) = 0 [pid 6441] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6438] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6442] close(3 [pid 6441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6438] <... futex resumed>) = 0 [pid 5070] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6438] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6442] <... close resumed>) = 0 [pid 6441] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5070] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5070] newfstatat(4, "", [pid 5065] unlink("./74/binderfs" [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6445] munmap(0x7efd74b1c000, 138412032 [pid 5070] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6445] <... munmap resumed>) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./75/bus") = 0 [pid 5070] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6445] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5070] newfstatat(AT_FDCWD, "./75/binderfs", [pid 6445] <... openat resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6442] mkdir("./bus", 0777 [pid 5070] unlink("./75/binderfs" [pid 5065] <... unlink resumed>) = 0 [pid 6445] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... unlink resumed>) = 0 [pid 6442] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, [pid 6442] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] getdents64(3, [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6446] <... write resumed>) = 524288 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5070] close(3 [pid 5065] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6446] munmap(0x7efd74b1c000, 138412032 [pid 5070] rmdir("./75") = 0 [pid 6446] <... munmap resumed>) = 0 [pid 5070] mkdir("./76", 0777) = 0 [pid 6446] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6445] <... ioctl resumed>) = 0 [ 142.832930][ T6442] loop4: detected capacity change from 0 to 1024 [ 142.848718][ T6441] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.859708][ T6445] loop1: detected capacity change from 0 to 1024 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6446] ioctl(4, LOOP_SET_FD, 3 [pid 6445] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5065] rmdir("./74" [pid 6445] <... close resumed>) = 0 [pid 6442] <... mount resumed>) = 0 [pid 6438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6438] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] mkdir("./bus", 0777 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6445] <... mkdir resumed>) = 0 [pid 6442] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6438] <... futex resumed>) = 0 [pid 5070] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6445] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6447 [pid 6438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 5065] mkdir("./75", 0777 [pid 6442] <... openat resumed>) = 3 [pid 6438] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... mkdir resumed>) = 0 [pid 6442] chdir("./bus" [pid 6438] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6447 attached [pid 6442] <... chdir resumed>) = 0 [pid 6438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6447] set_robust_list(0x555555fbc6a0, 24 [pid 6442] ioctl(4, LOOP_CLR_FD [pid 6438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6447] <... set_robust_list resumed>) = 0 [pid 6442] <... ioctl resumed>) = 0 [pid 6438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6448 attached [pid 6447] chdir("./76" [pid 6446] <... ioctl resumed>) = 0 [pid 6442] close(4 [pid 6447] <... chdir resumed>) = 0 [pid 6446] close(3 [pid 6445] <... mount resumed>) = 0 [pid 6447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6447] setpgid(0, 0 [pid 6446] <... close resumed>) = 0 [pid 6447] <... setpgid resumed>) = 0 [pid 6446] mkdir("./bus", 0777 [pid 6445] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6446] <... mkdir resumed>) = 0 [pid 6445] <... openat resumed>) = 3 [pid 6448] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6447] <... openat resumed>) = 3 [pid 6445] chdir("./bus" [pid 6442] <... close resumed>) = 0 [pid 6438] <... clone3 resumed> => {parent_tid=[6448]}, 88) = 6448 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6448] <... rseq resumed>) = 0 [pid 6447] write(3, "1000", 4 [pid 6446] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6445] <... chdir resumed>) = 0 [pid 6442] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6447] <... write resumed>) = 4 [pid 6442] <... futex resumed>) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6438] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6448] <... set_robust_list resumed>) = 0 [pid 6447] close(3 [pid 6445] ioctl(4, LOOP_CLR_FD [pid 6442] creat("./bus", 000 [pid 6439] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] close(3 [pid 6448] rt_sigprocmask(SIG_SETMASK, [], [pid 6447] <... close resumed>) = 0 [pid 6445] <... ioctl resumed>) = 0 [pid 6442] <... creat resumed>) = 4 [pid 6439] <... futex resumed>) = 0 [pid 6438] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6447] symlink("/dev/binderfs", "./binderfs" [pid 6445] close(4 [pid 5065] <... close resumed>) = 0 [pid 6448] creat("./file1", 000 [pid 6447] <... symlink resumed>) = 0 [pid 6445] <... close resumed>) = 0 [pid 6442] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6438] <... futex resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6446] <... mount resumed>) = 0 [pid 6445] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6445] <... futex resumed>) = 1 [pid 6443] <... futex resumed>) = 0 [pid 6438] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6449 attached [pid 6446] <... openat resumed>) = 3 [pid 6445] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6443] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] chdir("./bus" [pid 6445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6443] <... futex resumed>) = 0 [pid 6439] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6449 [pid 6449] set_robust_list(0x555555fbc6a0, 24 [pid 6447] <... futex resumed>) = 0 [pid 6445] creat("./bus", 000 [pid 6443] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6439] <... futex resumed>) = 0 [pid 6449] <... set_robust_list resumed>) = 0 [pid 6448] <... creat resumed>) = 5 [pid 6447] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6446] <... chdir resumed>) = 0 [pid 6445] <... creat resumed>) = 4 [pid 6439] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] chdir("./75" [pid 6448] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6446] ioctl(4, LOOP_CLR_FD [pid 6445] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... chdir resumed>) = 0 [pid 6448] <... futex resumed>) = 1 [pid 6447] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6446] <... ioctl resumed>) = 0 [pid 6445] <... futex resumed>) = 1 [pid 6443] <... futex resumed>) = 0 [pid 6438] <... futex resumed>) = 0 [pid 6449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6448] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6446] close(4 [pid 6445] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 142.880365][ T6441] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.889531][ T6446] loop3: detected capacity change from 0 to 1024 [ 142.899227][ T6441] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.923086][ T6441] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6443] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] <... prctl resumed>) = 0 [pid 6447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6446] <... close resumed>) = 0 [pid 6445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6443] <... futex resumed>) = 0 [pid 6447] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6446] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6443] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6446] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6447] <... mprotect resumed>) = 0 [pid 6446] creat("./bus", 000 [pid 6444] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6446] <... creat resumed>) = 4 [pid 6444] <... futex resumed>) = 0 [pid 6449] setpgid(0, 0 [pid 6447] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6444] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6446] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6444] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6444] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6449] <... setpgid resumed>) = 0 [pid 6449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6447] <... clone3 resumed> => {parent_tid=[6450]}, 88) = 6450 [pid 6449] <... openat resumed>) = 3 [pid 6447] rt_sigprocmask(SIG_SETMASK, [], [pid 6439] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6447] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6447] <... futex resumed>) = 0 [pid 6443] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6450 attached [pid 6447] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6443] <... futex resumed>) = 0 [pid 6450] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6450] <... rseq resumed>) = 0 [pid 6443] <... mmap resumed>) = 0x7efd7cefb000 [pid 6450] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6443] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6450] <... set_robust_list resumed>) = 0 [pid 6443] <... mprotect resumed>) = 0 [pid 6450] rt_sigprocmask(SIG_SETMASK, [], [ 142.971569][ T6441] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.981063][ T6442] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.982071][ T6445] hfsplus: request for non-existent node 16715520 in B*Tree [ 142.988360][ T6442] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.012936][ T6446] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6443] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] write(3, "1000", 4 [pid 6443] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6439] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] memfd_create("syzkaller", 0 [pid 6443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6450] <... memfd_create resumed>) = 3 [pid 6449] <... write resumed>) = 4 [pid 6439] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6451 attached [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6449] close(3 [pid 6443] <... clone3 resumed> => {parent_tid=[6451]}, 88) = 6451 [pid 6451] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6450] <... mmap resumed>) = 0x7efd74b1c000 [pid 6449] <... close resumed>) = 0 [pid 6443] rt_sigprocmask(SIG_SETMASK, [], [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6451] <... rseq resumed>) = 0 [pid 6450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6449] symlink("/dev/binderfs", "./binderfs" [pid 6443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6439] <... mmap resumed>) = 0x7efd7cefb000 [pid 6451] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6443] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... write resumed>) = 57344 [pid 6451] <... set_robust_list resumed>) = 0 [pid 6449] <... symlink resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6439] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6451] rt_sigprocmask(SIG_SETMASK, [], [pid 6450] <... write resumed>) = 524288 [pid 6449] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6441] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6438] exit_group(0 [pid 6451] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6444] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... futex resumed>) = ? [pid 6439] <... mprotect resumed>) = 0 [pid 6438] <... exit_group resumed>) = ? [pid 6451] creat("./file1", 000 [pid 6444] <... futex resumed>) = 0 [pid 6441] +++ exited with 0 +++ [pid 6439] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6449] <... futex resumed>) = 0 [pid 6448] <... futex resumed>) = ? [pid 6444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6439] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6444] <... mmap resumed>) = 0x7efd7cefb000 [pid 6444] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6450] munmap(0x7efd74b1c000, 138412032 [pid 6444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6450] <... munmap resumed>) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6444] <... clone3 resumed> => {parent_tid=[6452]}, 88) = 6452 [pid 6444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6444] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] <... openat resumed>) = 4 [pid 6444] <... futex resumed>) = 0 [ 143.021930][ T6441] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.048521][ T6446] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.063105][ T6445] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6450] ioctl(4, LOOP_SET_FD, 3 [pid 6444] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6452 attached [pid 6449] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6448] +++ exited with 0 +++ [pid 6438] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6438, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5067] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6453 attached [pid 6452] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6449] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6453] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6452] <... rseq resumed>) = 0 [pid 6449] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6439] <... clone3 resumed> => {parent_tid=[6453]}, 88) = 6453 [pid 5067] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6453] <... rseq resumed>) = 0 [pid 6452] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6439] rt_sigprocmask(SIG_SETMASK, [], [pid 6453] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6452] <... set_robust_list resumed>) = 0 [pid 6449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6453] <... set_robust_list resumed>) = 0 [pid 6452] rt_sigprocmask(SIG_SETMASK, [], [pid 6449] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6439] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6453] rt_sigprocmask(SIG_SETMASK, [], [pid 6452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6439] <... futex resumed>) = 0 [pid 6453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6452] creat("./file1", 000 [pid 6450] <... ioctl resumed>) = 0 [pid 6449] <... mprotect resumed>) = 0 [pid 6439] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] close(3) = 0 [pid 6453] creat("./file1", 000 [pid 6450] mkdir("./bus", 0777 [ 143.071600][ T6442] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.080796][ T6450] loop5: detected capacity change from 0 to 1024 [ 143.087432][ T6442] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.096612][ T6446] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.107364][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 143.107777][ T6445] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6449] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6450] <... mkdir resumed>) = 0 [pid 6449] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6444] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6453] <... creat resumed>) = 5 [pid 6450] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6453] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6454 attached ) = 1 [pid 6449] <... clone3 resumed> => {parent_tid=[6454]}, 88) = 6454 [pid 6439] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 6453] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6454] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6454] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6450] <... mount resumed>) = 0 [pid 6450] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6449] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] <... openat resumed>) = 3 [pid 6449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6450] chdir("./bus" [pid 6449] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6454] <... futex resumed>) = 0 [pid 6450] <... chdir resumed>) = 0 [pid 6449] <... futex resumed>) = 1 [pid 5067] newfstatat(AT_FDCWD, "./74/bus", [pid 6454] memfd_create("syzkaller", 0 [pid 6450] ioctl(4, LOOP_CLR_FD [pid 6449] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6454] <... memfd_create resumed>) = 3 [pid 6450] <... ioctl resumed>) = 0 [pid 5067] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6450] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6454] <... mmap resumed>) = 0x7efd74b1c000 [pid 6450] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6450] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... write resumed>) = 57344 [pid 6450] <... futex resumed>) = 1 [pid 6447] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 6450] creat("./bus", 000 [pid 6447] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(4, "", [pid 6450] <... creat resumed>) = 4 [pid 6447] <... futex resumed>) = 0 [pid 6442] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6454] <... write resumed>) = 524288 [pid 6450] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... futex resumed>) = 0 [pid 5067] getdents64(4, [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6439] exit_group(0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6453] <... futex resumed>) = ? [pid 6447] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] <... exit_group resumed>) = ? [pid 5067] getdents64(4, [pid 6453] +++ exited with 0 +++ [pid 6447] <... futex resumed>) = 0 [ 143.127125][ T6445] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.137993][ T6442] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.140187][ T6446] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.153595][ T6442] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6452] <... creat resumed>) = 5 [pid 6451] <... creat resumed>) = 5 [pid 6450] <... futex resumed>) = 0 [pid 6447] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6452] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6451] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6452] <... futex resumed>) = 0 [pid 6451] <... futex resumed>) = 0 [pid 6442] +++ exited with 0 +++ [pid 6439] +++ exited with 0 +++ [pid 5067] close(4 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5069] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6451] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... openat resumed>) = 3 [pid 6454] munmap(0x7efd74b1c000, 138412032 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6454] <... munmap resumed>) = 0 [pid 5069] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6452] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... close resumed>) = 0 [pid 6454] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] rmdir("./74/bus" [pid 6454] <... openat resumed>) = 4 [ 143.193473][ T6445] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.207101][ T6446] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.215349][ T6446] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.217922][ T6450] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.223512][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 143.230738][ T6445] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6454] ioctl(4, LOOP_SET_FD, 3 [pid 6447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... rmdir resumed>) = 0 [pid 6447] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6447] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] newfstatat(AT_FDCWD, "./74/binderfs", [pid 6447] <... mprotect resumed>) = 0 [pid 6446] <... write resumed>) = 57344 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./74/binderfs" [pid 6446] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6446] <... futex resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6447] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6444] exit_group(0 [pid 6452] <... futex resumed>) = ? [pid 6447] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6445] <... write resumed>) = 57344 [pid 6444] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6455 attached [pid 6452] +++ exited with 0 +++ [pid 6445] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6455] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6447] <... clone3 resumed> => {parent_tid=[6455]}, 88) = 6455 [pid 6445] <... futex resumed>) = 0 [pid 6455] <... rseq resumed>) = 0 [pid 6447] rt_sigprocmask(SIG_SETMASK, [], [pid 6445] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6455] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6447] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6447] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6455] <... set_robust_list resumed>) = 0 [pid 6454] <... ioctl resumed>) = 0 [pid 6455] rt_sigprocmask(SIG_SETMASK, [], [pid 6454] close(3 [pid 6455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6454] <... close resumed>) = 0 [pid 6455] creat("./file1", 000 [pid 6454] mkdir("./bus", 0777) = 0 [pid 5067] getdents64(3, [pid 6443] exit_group(0 [pid 6446] +++ exited with 0 +++ [pid 6444] +++ exited with 0 +++ [pid 6451] <... futex resumed>) = ? [pid 6445] <... futex resumed>) = ? [pid 6443] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6451] +++ exited with 0 +++ [pid 5067] close(3 [pid 6445] +++ exited with 0 +++ [pid 6443] +++ exited with 0 +++ [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6444, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5067] <... close resumed>) = 0 [pid 5068] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./74" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6443, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5068] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5068] <... openat resumed>) = 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5067] <... rmdir resumed>) = 0 [pid 6454] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./75", 0777 [pid 5068] getdents64(3, [pid 5066] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [ 143.243094][ T6450] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.253186][ T6454] loop0: detected capacity change from 0 to 1024 [ 143.266146][ T6450] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(AT_FDCWD, "./75/bus", [pid 5066] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6447] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3) = 0 [pid 6454] <... mount resumed>) = 0 [pid 6454] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6454] <... openat resumed>) = 3 [pid 6454] chdir("./bus") = 0 [pid 6454] ioctl(4, LOOP_CLR_FD) = 0 [pid 5069] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6456 attached [pid 6454] close(4 [pid 5069] newfstatat(4, "", [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6456 [ 143.314611][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 143.327859][ T6450] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6456] set_robust_list(0x555555fbc6a0, 24 [pid 6454] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6456] <... set_robust_list resumed>) = 0 [pid 6454] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(4, [pid 6456] chdir("./75" [pid 6455] <... creat resumed>) = 5 [pid 6454] <... futex resumed>) = 1 [pid 6449] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... umount2 resumed>) = 0 [pid 6454] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] getdents64(4, [pid 6456] <... chdir resumed>) = 0 [pid 6455] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4 [pid 6449] <... futex resumed>) = 1 [pid 6449] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... close resumed>) = 0 [pid 6455] <... futex resumed>) = 0 [pid 6454] <... futex resumed>) = 0 [pid 5069] rmdir("./75/bus" [pid 6456] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6455] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] creat("./bus", 000 [pid 5069] <... rmdir resumed>) = 0 [pid 6454] <... creat resumed>) = 4 [pid 6454] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6454] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./76/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6456] <... prctl resumed>) = 0 [pid 6449] <... futex resumed>) = 0 [pid 5069] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] setpgid(0, 0 [pid 6449] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6456] <... setpgid resumed>) = 0 [pid 6454] <... futex resumed>) = 0 [pid 6449] <... futex resumed>) = 1 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6449] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(AT_FDCWD, "./75/binderfs", [pid 5068] <... openat resumed>) = 4 [pid 6456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6454] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5068] newfstatat(4, "", [pid 6456] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 143.381860][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 143.397827][ T6450] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.421092][ T6450] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] <... umount2 resumed>) = 0 [pid 5069] unlink("./75/binderfs" [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./76/bus" [pid 6456] write(3, "1000", 4 [pid 5069] getdents64(3, [pid 5068] <... rmdir resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6450] <... write resumed>) = 57344 [pid 5069] close(3 [pid 5068] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... close resumed>) = 0 [pid 6456] <... write resumed>) = 4 [pid 6456] close(3 [pid 6450] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] <... futex resumed>) = 0 [pid 6447] exit_group(0 [pid 5068] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6455] <... futex resumed>) = ? [pid 6447] <... exit_group resumed>) = ? [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6456] <... close resumed>) = 0 [pid 6455] +++ exited with 0 +++ [pid 6450] +++ exited with 0 +++ [pid 6447] +++ exited with 0 +++ [pid 5069] rmdir("./75" [pid 5066] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6456] symlink("/dev/binderfs", "./binderfs" [pid 5068] unlink("./76/binderfs" [pid 6456] <... symlink resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6447, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5068] <... unlink resumed>) = 0 [pid 5070] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 5070] newfstatat(3, "", [pid 5068] rmdir("./76" [pid 6456] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6456] <... futex resumed>) = 0 [pid 5069] mkdir("./76", 0777 [pid 5068] mkdir("./77", 0777 [pid 5066] newfstatat(AT_FDCWD, "./76/bus", [pid 5068] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] getdents64(3, [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... openat resumed>) = 3 [pid 5070] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6456] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... openat resumed>) = 4 [pid 6456] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6449] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6449] <... futex resumed>) = 0 [pid 6456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] newfstatat(4, "", [pid 6449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6449] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6457 [pid 6456] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6449] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] getdents64(4, [pid 6456] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6449] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6457 attached [pid 6456] <... mprotect resumed>) = 0 [pid 6449] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6457] set_robust_list(0x555555fbc6a0, 24 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6457] <... set_robust_list resumed>) = 0 [pid 6456] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6449] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] getdents64(4, [pid 6456] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6449] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [ 143.447862][ T6454] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.487145][ T6454] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6458 attached [pid 6457] chdir("./77" [pid 6456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] <... openat resumed>) = 3 [pid 5066] close(4 [pid 6458] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5066] <... close resumed>) = 0 [pid 6458] <... rseq resumed>) = 0 [pid 6449] <... clone3 resumed> => {parent_tid=[6458]}, 88) = 6458 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] rmdir("./76/bus"./strace-static-x86_64: Process 6459 attached [pid 6458] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6456] <... clone3 resumed> => {parent_tid=[6459]}, 88) = 6459 [pid 6449] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(3 [pid 6457] <... chdir resumed>) = 0 [pid 6456] rt_sigprocmask(SIG_SETMASK, [], [pid 6449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... close resumed>) = 0 [pid 6457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6457] setpgid(0, 0 [pid 6449] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6457] <... setpgid resumed>) = 0 [pid 6457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6449] <... futex resumed>) = 0 [pid 6459] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6458] <... set_robust_list resumed>) = 0 [pid 6457] <... openat resumed>) = 3 [pid 6456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6449] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... rmdir resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6460 [pid 6457] write(3, "1000", 4 [pid 6456] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] rt_sigprocmask(SIG_SETMASK, [], [pid 6456] <... futex resumed>) = 0 [pid 5066] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6459] <... rseq resumed>) = 0 [pid 6459] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6458] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6457] <... write resumed>) = 4 [pid 6456] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6459] <... set_robust_list resumed>) = 0 [pid 6458] creat("./file1", 000 [pid 5066] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6457] close(3./strace-static-x86_64: Process 6460 attached ) = 0 [pid 6460] set_robust_list(0x555555fbc6a0, 24 [pid 6457] symlink("/dev/binderfs", "./binderfs" [pid 6459] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] unlink("./76/binderfs" [pid 6460] <... set_robust_list resumed>) = 0 [pid 6459] memfd_create("syzkaller", 0 [pid 6457] <... symlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, [pid 6460] chdir("./76" [pid 6459] <... memfd_create resumed>) = 3 [pid 6457] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6460] <... chdir resumed>) = 0 [pid 6459] <... mmap resumed>) = 0x7efd74b1c000 [pid 6457] <... futex resumed>) = 0 [pid 5066] close(3 [pid 6457] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6457] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6460] <... prctl resumed>) = 0 [pid 6457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6460] setpgid(0, 0 [pid 6459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] <... close resumed>) = 0 [ 143.523049][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 143.532891][ T6454] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] rmdir("./76" [pid 6460] <... setpgid resumed>) = 0 [pid 6457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6457] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6460] <... openat resumed>) = 3 [pid 6457] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] mkdir("./77", 0777 [pid 6460] write(3, "1000", 4 [pid 6457] <... mprotect resumed>) = 0 [pid 6449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6460] <... write resumed>) = 4 [pid 6457] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6460] close(3 [pid 6457] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6460] <... close resumed>) = 0 [pid 6457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6460] symlink("/dev/binderfs", "./binderfs" [pid 5070] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6461 attached [pid 6460] <... symlink resumed>) = 0 [pid 6459] <... write resumed>) = 524288 [pid 6457] <... clone3 resumed> => {parent_tid=[6461]}, 88) = 6461 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6460] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] rt_sigprocmask(SIG_SETMASK, [], [pid 6460] <... futex resumed>) = 0 [pid 6457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6460] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6457] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6457] <... futex resumed>) = 0 [pid 6461] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 143.579993][ T6454] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.603398][ T6454] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6457] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6461] <... rseq resumed>) = 0 [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6459] munmap(0x7efd74b1c000, 138412032 [pid 5070] newfstatat(AT_FDCWD, "./76/bus", [pid 5066] <... openat resumed>) = 3 [pid 6461] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6461] <... set_robust_list resumed>) = 0 [pid 6460] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6461] rt_sigprocmask(SIG_SETMASK, [], [pid 6460] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] close(3 [pid 6461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6460] <... mprotect resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6461] memfd_create("syzkaller", 0 [pid 6460] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6461] <... memfd_create resumed>) = 3 [pid 6460] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6461] <... mmap resumed>) = 0x7efd74b1c000 [pid 6461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6460] <... clone3 resumed> => {parent_tid=[6462]}, 88) = 6462 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6463 ./strace-static-x86_64: Process 6463 attached ./strace-static-x86_64: Process 6462 attached [pid 6460] rt_sigprocmask(SIG_SETMASK, [], [pid 6459] <... munmap resumed>) = 0 [pid 6458] <... creat resumed>) = 5 [pid 6454] <... write resumed>) = 57344 [pid 5070] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6458] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] <... rseq resumed>) = 0 [pid 6460] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6458] <... futex resumed>) = 0 [pid 6462] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6460] <... futex resumed>) = 0 [pid 6458] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6454] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] set_robust_list(0x555555fbc6a0, 24 [pid 6462] <... set_robust_list resumed>) = 0 [pid 6461] <... write resumed>) = 524288 [pid 6460] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6459] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6454] <... futex resumed>) = 0 [pid 6449] exit_group(0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6463] <... set_robust_list resumed>) = 0 [pid 6462] rt_sigprocmask(SIG_SETMASK, [], [pid 6449] <... exit_group resumed>) = ? [pid 5070] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6459] <... openat resumed>) = 4 [pid 6463] chdir("./77" [pid 6462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6461] munmap(0x7efd74b1c000, 138412032 [pid 6458] <... futex resumed>) = ? [pid 5070] <... openat resumed>) = 4 [pid 6463] <... chdir resumed>) = 0 [ 143.623623][ T6454] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6462] memfd_create("syzkaller", 0 [pid 6461] <... munmap resumed>) = 0 [pid 6459] ioctl(4, LOOP_SET_FD, 3 [pid 6458] +++ exited with 0 +++ [pid 6454] +++ exited with 0 +++ [pid 6449] +++ exited with 0 +++ [pid 5070] newfstatat(4, "", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6449, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6462] <... memfd_create resumed>) = 3 [pid 6461] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6461] <... openat resumed>) = 4 [pid 5070] getdents64(4, [pid 5065] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] <... mmap resumed>) = 0x7efd74b1c000 [pid 6461] ioctl(4, LOOP_SET_FD, 3 [pid 6463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6459] <... ioctl resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6463] <... prctl resumed>) = 0 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5070] <... close resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 6463] setpgid(0, 0) = 0 [pid 5070] rmdir("./76/bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6459] close(3 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 6461] <... ioctl resumed>) = 0 [pid 6463] <... openat resumed>) = 3 [pid 6462] <... write resumed>) = 524288 [pid 6459] <... close resumed>) = 0 [pid 5070] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6463] write(3, "1000", 4 [pid 6459] mkdir("./bus", 0777 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6463] <... write resumed>) = 4 [pid 6461] close(3) = 0 [pid 6463] close(3 [pid 6461] mkdir("./bus", 0777 [pid 6463] <... close resumed>) = 0 [pid 6461] <... mkdir resumed>) = 0 [pid 6459] <... mkdir resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6463] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6461] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6463] <... symlink resumed>) = 0 [pid 6462] munmap(0x7efd74b1c000, 138412032 [pid 6459] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] unlink("./76/binderfs" [pid 6463] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] <... munmap resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 6463] <... futex resumed>) = 0 [pid 6461] <... mount resumed>) = 0 [pid 6463] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6461] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6463] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] getdents64(3, [pid 6463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6461] <... openat resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6462] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5070] close(3 [pid 6463] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6462] <... openat resumed>) = 4 [pid 6461] chdir("./bus" [pid 6459] <... mount resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6463] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] rmdir("./76" [pid 6463] <... mprotect resumed>) = 0 [pid 6462] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... rmdir resumed>) = 0 [pid 6462] <... ioctl resumed>) = 0 [pid 6462] close(3) = 0 [ 143.678984][ T6459] loop2: detected capacity change from 0 to 1024 [ 143.679964][ T6461] loop3: detected capacity change from 0 to 1024 [pid 6462] mkdir("./bus", 0777 [pid 5070] mkdir("./77", 0777 [pid 6463] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6462] <... mkdir resumed>) = 0 [pid 6461] <... chdir resumed>) = 0 [pid 6459] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] <... mkdir resumed>) = 0 [pid 6459] <... openat resumed>) = 3 [pid 6459] chdir("./bus" [pid 6463] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6462] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6459] <... chdir resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6461] ioctl(4, LOOP_CLR_FD [pid 6459] ioctl(4, LOOP_CLR_FD [pid 5070] <... openat resumed>) = 3 [pid 6459] <... ioctl resumed>) = 0 [pid 6461] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6464 attached [pid 6461] close(4 [pid 6459] close(4 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6463] <... clone3 resumed> => {parent_tid=[6464]}, 88) = 6464 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6464] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6461] <... close resumed>) = 0 [pid 6459] <... close resumed>) = 0 [pid 6464] <... rseq resumed>) = 0 [pid 6461] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6464] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6463] rt_sigprocmask(SIG_SETMASK, [], [pid 6461] <... futex resumed>) = 1 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6456] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6464] <... set_robust_list resumed>) = 0 [pid 6463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6461] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6459] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 6464] rt_sigprocmask(SIG_SETMASK, [], [pid 6463] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 6456] <... futex resumed>) = 0 [pid 6463] <... futex resumed>) = 0 [pid 6463] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6456] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6461] creat("./bus", 000 [pid 6459] creat("./bus", 000 [pid 6457] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = 0 [pid 6464] memfd_create("syzkaller", 0 [pid 6462] <... mount resumed>) = 0 [pid 6461] <... creat resumed>) = 4 [pid 6459] <... creat resumed>) = 4 [pid 6462] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6462] chdir("./bus") = 0 ./strace-static-x86_64: Process 6465 attached [pid 6464] <... memfd_create resumed>) = 3 [pid 6462] ioctl(4, LOOP_CLR_FD [pid 6461] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6465 [pid 5065] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6465] set_robust_list(0x555555fbc6a0, 24 [pid 6464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6462] <... ioctl resumed>) = 0 [pid 6461] <... futex resumed>) = 1 [pid 6459] <... futex resumed>) = 1 [pid 6457] <... futex resumed>) = 0 [pid 6456] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6465] <... set_robust_list resumed>) = 0 [pid 6464] <... mmap resumed>) = 0x7efd74b1c000 [pid 6462] close(4 [pid 6461] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6459] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(AT_FDCWD, "./75/bus", [pid 6465] chdir("./77" [pid 6462] <... close resumed>) = 0 [pid 6459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6457] <... futex resumed>) = 0 [pid 6456] <... futex resumed>) = 0 [pid 6465] <... chdir resumed>) = 0 [pid 6462] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6459] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6457] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6456] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 143.726992][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 143.732842][ T6462] loop4: detected capacity change from 0 to 1024 [pid 6462] <... futex resumed>) = 1 [pid 6460] <... futex resumed>) = 0 [pid 5065] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6462] creat("./bus", 000 [pid 6460] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6462] <... creat resumed>) = 4 [pid 6460] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6465] <... prctl resumed>) = 0 [pid 6462] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6465] setpgid(0, 0 [pid 6462] <... futex resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6465] <... setpgid resumed>) = 0 [pid 6462] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] newfstatat(4, "", [pid 6465] <... openat resumed>) = 3 [pid 6460] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6460] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6465] write(3, "1000", 4 [pid 6462] <... futex resumed>) = 0 [pid 6462] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6465] <... write resumed>) = 4 [pid 6464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] getdents64(4, [pid 6465] close(3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6465] <... close resumed>) = 0 [pid 6464] <... write resumed>) = 524288 [pid 5065] getdents64(4, [pid 6465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6457] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] close(4 [pid 6465] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] <... futex resumed>) = 0 [pid 6456] <... futex resumed>) = 0 [pid 6465] <... futex resumed>) = 0 [pid 6457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 6465] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6464] munmap(0x7efd74b1c000, 138412032 [pid 6457] <... mmap resumed>) = 0x7efd7cefb000 [pid 6456] <... mmap resumed>) = 0x7efd7cefb000 [pid 6465] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6457] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [ 143.803839][ T6461] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.814401][ T6459] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.820874][ T6462] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.831786][ T6462] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.839471][ T6459] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6456] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] rmdir("./75/bus" [pid 6465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6464] <... munmap resumed>) = 0 [pid 6457] <... mprotect resumed>) = 0 [pid 6456] <... mprotect resumed>) = 0 [pid 6465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6464] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6460] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6457] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6456] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6464] <... openat resumed>) = 4 [pid 6460] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 6465] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6464] ioctl(4, LOOP_SET_FD, 3 [pid 6460] <... futex resumed>) = 0 [pid 6457] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6456] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] newfstatat(AT_FDCWD, "./75/binderfs", ./strace-static-x86_64: Process 6467 attached ./strace-static-x86_64: Process 6466 attached [pid 6465] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6464] <... ioctl resumed>) = 0 [pid 6460] <... mmap resumed>) = 0x7efd7cefb000 [pid 6456] <... clone3 resumed> => {parent_tid=[6466]}, 88) = 6466 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6465] <... mprotect resumed>) = 0 [pid 6460] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6457] <... clone3 resumed> => {parent_tid=[6467]}, 88) = 6467 [pid 6456] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] unlink("./75/binderfs" [pid 6464] close(3 [pid 6467] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6466] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [ 143.847708][ T6461] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.865135][ T6462] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.865138][ T6459] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.865161][ T6462] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.881303][ T6461] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.895319][ T6459] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6467] <... rseq resumed>) = 0 [pid 6466] <... rseq resumed>) = 0 [pid 6464] <... close resumed>) = 0 [pid 6457] rt_sigprocmask(SIG_SETMASK, [], [pid 6456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6467] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6466] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6464] mkdir("./bus", 0777 [pid 6460] <... mprotect resumed>) = 0 [pid 6457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6467] <... set_robust_list resumed>) = 0 [pid 6466] <... set_robust_list resumed>) = 0 [pid 6465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6457] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6456] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6464] <... mkdir resumed>) = 0 [pid 6457] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6467] rt_sigprocmask(SIG_SETMASK, [], [pid 6466] rt_sigprocmask(SIG_SETMASK, [], [pid 6460] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6457] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6464] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6456] <... futex resumed>) = 0 [pid 5065] close(3 [pid 6467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6465] <... clone3 resumed> => {parent_tid=[6468]}, 88) = 6468 [pid 6460] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6456] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6468 attached [pid 6467] creat("./file1", 000 [pid 6466] creat("./file1", 000 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], [pid 6460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... close resumed>) = 0 [pid 6468] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6468] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 6469 attached [pid 6468] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6465] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6460] <... clone3 resumed> => {parent_tid=[6469]}, 88) = 6469 [pid 5065] rmdir("./75" [pid 6466] <... creat resumed>) = 5 [pid 6460] rt_sigprocmask(SIG_SETMASK, [], [pid 6466] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] <... futex resumed>) = 0 [pid 6469] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6468] <... set_robust_list resumed>) = 0 [pid 6467] <... creat resumed>) = 5 [pid 6466] <... futex resumed>) = 1 [pid 6465] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6456] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6469] <... rseq resumed>) = 0 [pid 6468] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6468] memfd_create("syzkaller", 0) = 3 [pid 6468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6469] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6467] <... futex resumed>) = 1 [pid 6460] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6457] <... futex resumed>) = 0 [pid 5065] mkdir("./76", 0777 [pid 6469] <... set_robust_list resumed>) = 0 [pid 6468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6469] rt_sigprocmask(SIG_SETMASK, [], [pid 6467] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] <... futex resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6469] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 143.904289][ T6464] loop1: detected capacity change from 0 to 1024 [ 143.931102][ T6461] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.943166][ T6459] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6460] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6469] creat("./file1", 000 [pid 5065] <... openat resumed>) = 3 [pid 6464] <... mount resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6468] <... write resumed>) = 524288 [pid 6464] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6459] <... write resumed>) = 57344 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6464] <... openat resumed>) = 3 [pid 6459] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] close(3 [pid 6464] chdir("./bus" [pid 6459] <... futex resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6468] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6468] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6456] exit_group(0 [pid 6469] <... creat resumed>) = 5 [pid 6468] <... openat resumed>) = 4 [pid 6466] <... futex resumed>) = ? [pid 6456] <... exit_group resumed>) = ? [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6469] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6466] +++ exited with 0 +++ [pid 6464] <... chdir resumed>) = 0 [pid 6469] <... futex resumed>) = 1 [pid 6464] ioctl(4, LOOP_CLR_FD [pid 6460] <... futex resumed>) = 0 [pid 6469] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6468] ioctl(4, LOOP_SET_FD, 3 [pid 6464] <... ioctl resumed>) = 0 [pid 6459] +++ exited with 0 +++ [pid 6456] +++ exited with 0 +++ ./strace-static-x86_64: Process 6470 attached [pid 6464] close(4 [pid 6461] <... write resumed>) = 57344 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6470 [ 143.951629][ T6459] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.968773][ T6461] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.985122][ T6461] hfsplus: request for non-existent node 16715520 in B*Tree [ 143.996285][ T6462] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6470] set_robust_list(0x555555fbc6a0, 24 [pid 6464] <... close resumed>) = 0 [pid 6461] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... set_robust_list resumed>) = 0 [pid 6468] <... ioctl resumed>) = 0 [pid 6464] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = 0 [pid 6468] close(3 [pid 6470] chdir("./76" [pid 6461] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6457] exit_group(0 [pid 6464] <... futex resumed>) = 1 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6456, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6463] <... futex resumed>) = 0 [pid 6470] <... chdir resumed>) = 0 [pid 6468] <... close resumed>) = 0 [pid 6467] <... futex resumed>) = ? [pid 6463] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6461] <... futex resumed>) = ? [pid 6457] <... exit_group resumed>) = ? [pid 6468] mkdir("./bus", 0777 [pid 6467] +++ exited with 0 +++ [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 6468] <... mkdir resumed>) = 0 [pid 6463] <... futex resumed>) = 0 [pid 6470] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6468] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6463] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... restart_syscall resumed>) = 0 [pid 6470] <... prctl resumed>) = 0 [pid 6464] creat("./bus", 000 [pid 6461] +++ exited with 0 +++ [pid 6457] +++ exited with 0 +++ [pid 6470] setpgid(0, 0 [pid 6464] <... creat resumed>) = 4 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6457, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5067] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] <... setpgid resumed>) = 0 [pid 6468] <... mount resumed>) = 0 [pid 6464] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6468] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6464] <... futex resumed>) = 1 [pid 6463] <... futex resumed>) = 0 [pid 6470] <... openat resumed>) = 3 [pid 6468] <... openat resumed>) = 3 [pid 6464] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6463] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6470] write(3, "1000", 4 [pid 6468] chdir("./bus" [pid 6463] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6470] <... write resumed>) = 4 [pid 6468] <... chdir resumed>) = 0 [pid 6463] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] close(3 [pid 6468] ioctl(4, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(3, "", [pid 6470] <... close resumed>) = 0 [pid 6468] <... ioctl resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5068] newfstatat(3, "", [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [ 144.004942][ T6468] loop5: detected capacity change from 0 to 1024 [ 144.031170][ T6462] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] symlink("/dev/binderfs", "./binderfs" [pid 6468] close(4 [pid 6462] <... write resumed>) = 57344 [pid 6462] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... symlink resumed>) = 0 [pid 6468] <... close resumed>) = 0 [pid 6462] <... futex resumed>) = 0 [pid 6470] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6468] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6460] exit_group(0 [pid 6469] <... futex resumed>) = ? [pid 6468] <... futex resumed>) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6462] <... futex resumed>) = ? [pid 6460] <... exit_group resumed>) = ? [pid 6470] <... futex resumed>) = 0 [pid 6469] +++ exited with 0 +++ [pid 6468] creat("./bus", 000 [pid 6465] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6462] +++ exited with 0 +++ [pid 6465] <... futex resumed>) = 0 [pid 6468] <... creat resumed>) = 4 [pid 6465] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6460] +++ exited with 0 +++ [pid 6470] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6468] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6460, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6470] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5069] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6468] <... futex resumed>) = 1 [pid 6465] <... futex resumed>) = 0 [pid 6465] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6468] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6465] <... futex resumed>) = 0 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6465] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... openat resumed>) = 3 [pid 6470] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6470] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6463] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 144.072369][ T6464] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.084189][ T6464] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.097540][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 144.103577][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6470] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6463] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = 0 [pid 6463] <... futex resumed>) = 0 [pid 5068] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6470] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6463] <... mmap resumed>) = 0x7efd7cefb000 ./strace-static-x86_64: Process 6471 attached [pid 6463] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] newfstatat(AT_FDCWD, "./77/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6471] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6470] <... clone3 resumed> => {parent_tid=[6471]}, 88) = 6471 [pid 6463] <... mprotect resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6471] <... rseq resumed>) = 0 [pid 6470] rt_sigprocmask(SIG_SETMASK, [], [pid 6463] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] newfstatat(4, "", [pid 5067] <... umount2 resumed>) = 0 [pid 6471] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5067] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./77/bus" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6471] <... set_robust_list resumed>) = 0 [pid 6470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6463] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./75/bus", [pid 6471] rt_sigprocmask(SIG_SETMASK, [], [pid 6470] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6465] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 6465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6471] memfd_create("syzkaller", 0 [pid 6465] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./76/bus", [pid 6465] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6470] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6472 attached [pid 6471] <... memfd_create resumed>) = 3 [pid 6470] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6465] <... mprotect resumed>) = 0 [pid 6463] <... clone3 resumed> => {parent_tid=[6472]}, 88) = 6472 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./77/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 144.119065][ T6468] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.127902][ T47] hfsplus: b-tree write err: -5, ino 4 [ 144.131342][ T6464] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.146482][ T6464] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.160388][ T6468] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6472] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6463] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... openat resumed>) = 4 [pid 5068] unlink("./77/binderfs" [pid 5067] <... openat resumed>) = 4 [pid 5069] newfstatat(4, "", [pid 5068] <... unlink resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(4, [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, [pid 5068] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] rmdir("./77" [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6472] <... rseq resumed>) = 0 [pid 6471] <... mmap resumed>) = 0x7efd74b1c000 [pid 6465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] close(4 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 6465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6463] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./76/bus" [pid 5068] mkdir("./78", 0777 [pid 5067] <... close resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] rmdir("./75/bus" [pid 6471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6463] <... futex resumed>) = 0 [pid 5069] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 6472] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6465] <... clone3 resumed> => {parent_tid=[6473]}, 88) = 6473 [pid 6463] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6472] <... set_robust_list resumed>) = 0 [pid 6465] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6472] rt_sigprocmask(SIG_SETMASK, [], [pid 6465] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6472] creat("./file1", 000 [pid 6465] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 3 [pid 5067] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./76/binderfs", [pid 5068] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6473 attached [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6473] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5069] unlink("./76/binderfs" [pid 5068] close(3 [pid 6473] <... rseq resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./75/binderfs", [pid 6473] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5069] getdents64(3, [pid 5068] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6473] <... set_robust_list resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6473] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(3 [pid 5067] unlink("./75/binderfs" [pid 6473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6465] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] creat("./file1", 000 [pid 5069] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6474 [pid 5067] <... unlink resumed>) = 0 [pid 5069] rmdir("./76" [pid 5067] getdents64(3, ./strace-static-x86_64: Process 6474 attached [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6474] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 5069] mkdir("./77", 0777 [pid 5067] close(3 [pid 6474] chdir("./78" [pid 6473] <... creat resumed>) = 5 [pid 6472] <... creat resumed>) = 5 [pid 6471] <... write resumed>) = 524288 [pid 6464] <... write resumed>) = 57344 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 6472] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... futex resumed>) = 1 [pid 6464] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6463] <... futex resumed>) = 0 [pid 5067] rmdir("./75" [pid 6472] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6464] <... futex resumed>) = 0 [pid 6463] exit_group(0 [pid 6473] <... futex resumed>) = 1 [pid 6472] <... futex resumed>) = ? [pid 6463] <... exit_group resumed>) = ? [pid 5067] <... rmdir resumed>) = 0 [pid 6473] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] mkdir("./76", 0777) = 0 [pid 6474] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... openat resumed>) = 3 [pid 6474] <... prctl resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6474] setpgid(0, 0) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 144.187751][ T6464] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.195742][ T6468] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.203703][ T6464] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.218380][ T6468] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] close(3 [pid 6465] <... futex resumed>) = 0 [pid 6474] write(3, "1000", 4 [pid 6472] +++ exited with 0 +++ [pid 5069] <... openat resumed>) = 3 [pid 6474] <... write resumed>) = 4 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 6474] close(3 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6474] <... close resumed>) = 0 [pid 6464] +++ exited with 0 +++ [pid 6463] +++ exited with 0 +++ [pid 5069] close(3 [pid 6474] symlink("/dev/binderfs", "./binderfs" [pid 6471] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... close resumed>) = 0 [pid 6474] <... symlink resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6463, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 6475 attached [pid 6474] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... munmap resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6475] set_robust_list(0x555555fbc6a0, 24 [pid 6474] <... futex resumed>) = 0 [pid 6471] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6475 [pid 5066] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6476 attached [pid 6475] <... set_robust_list resumed>) = 0 [pid 6474] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6471] <... openat resumed>) = 4 [pid 6474] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6474] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6476 [pid 5066] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6474] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6474] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6471] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... openat resumed>) = 3 [pid 6476] set_robust_list(0x555555fbc6a0, 24 [pid 6475] chdir("./76" [pid 6474] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] newfstatat(3, "", [pid 6475] <... chdir resumed>) = 0 [pid 6476] <... set_robust_list resumed>) = 0 [pid 6474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6476] chdir("./77" [pid 6475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6476] <... chdir resumed>) = 0 [pid 6475] <... prctl resumed>) = 0 [pid 6475] setpgid(0, 0 [pid 6476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6475] <... setpgid resumed>) = 0 [pid 6476] <... prctl resumed>) = 0 [pid 6476] setpgid(0, 0 [pid 6475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6476] <... setpgid resumed>) = 0 [pid 6475] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6475] write(3, "1000", 4 [pid 6474] <... clone3 resumed> => {parent_tid=[6477]}, 88) = 6477 [pid 5066] getdents64(3, [pid 6475] <... write resumed>) = 4 ./strace-static-x86_64: Process 6477 attached [pid 6476] <... openat resumed>) = 3 [pid 6474] rt_sigprocmask(SIG_SETMASK, [], [pid 6477] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6476] write(3, "1000", 4 [pid 6475] close(3 [pid 6474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6477] <... rseq resumed>) = 0 [pid 6476] <... write resumed>) = 4 [pid 6475] <... close resumed>) = 0 [pid 6474] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... ioctl resumed>) = 0 [pid 5066] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6477] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6476] close(3 [pid 6475] symlink("/dev/binderfs", "./binderfs" [pid 6474] <... futex resumed>) = 0 [pid 6477] <... set_robust_list resumed>) = 0 [pid 6474] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6477] rt_sigprocmask(SIG_SETMASK, [], [pid 6475] <... symlink resumed>) = 0 [pid 6477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6476] <... close resumed>) = 0 [pid 6475] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] close(3 [pid 6468] <... write resumed>) = 57344 [pid 6477] memfd_create("syzkaller", 0 [pid 6476] symlink("/dev/binderfs", "./binderfs" [pid 6475] <... futex resumed>) = 0 [pid 6471] <... close resumed>) = 0 [pid 6468] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6465] exit_group(0 [pid 6475] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6471] mkdir("./bus", 0777 [pid 6468] <... futex resumed>) = ? [pid 6465] <... exit_group resumed>) = ? [pid 6476] <... symlink resumed>) = 0 [pid 6475] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6473] <... futex resumed>) = ? [pid 6471] <... mkdir resumed>) = 0 [pid 6468] +++ exited with 0 +++ [pid 6477] <... memfd_create resumed>) = 3 [pid 6473] +++ exited with 0 +++ [pid 6465] +++ exited with 0 +++ [ 144.253946][ T6468] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.278625][ T6468] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.287946][ T6471] loop0: detected capacity change from 0 to 1024 [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6465, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6477] <... mmap resumed>) = 0x7efd74b1c000 [pid 6477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6471] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6476] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6476] <... futex resumed>) = 0 [pid 6475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 6476] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6476] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6475] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] <... openat resumed>) = 3 [pid 6476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6475] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6471] <... mount resumed>) = 0 [pid 6476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6475] <... mprotect resumed>) = 0 [pid 6471] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6476] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6476] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6471] <... openat resumed>) = 3 [pid 6476] <... mprotect resumed>) = 0 [pid 6475] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6471] chdir("./bus" [pid 5070] newfstatat(3, "", [pid 5066] newfstatat(AT_FDCWD, "./77/bus", [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6475] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6471] <... chdir resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6476] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6471] ioctl(4, LOOP_CLR_FD [pid 5070] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6478 attached [pid 6477] <... write resumed>) = 524288 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6471] <... ioctl resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6478] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6475] <... clone3 resumed> => {parent_tid=[6478]}, 88) = 6478 [pid 6471] close(4 [pid 5070] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6478] <... rseq resumed>) = 0 [pid 6476] <... clone3 resumed> => {parent_tid=[6479]}, 88) = 6479 [pid 6475] rt_sigprocmask(SIG_SETMASK, [], [pid 6471] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6479 attached [pid 6479] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6479] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6479] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6476] rt_sigprocmask(SIG_SETMASK, [], [pid 6475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6471] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6478] <... set_robust_list resumed>) = 0 [pid 6476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6475] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = 1 [pid 6470] <... futex resumed>) = 0 [pid 6475] <... futex resumed>) = 0 [pid 6470] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 6476] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6471] creat("./bus", 000 [pid 6470] <... futex resumed>) = 0 [pid 6478] rt_sigprocmask(SIG_SETMASK, [], [pid 6476] <... futex resumed>) = 1 [pid 5066] newfstatat(4, "", [pid 6479] <... futex resumed>) = 0 [pid 6478] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6477] munmap(0x7efd74b1c000, 138412032 [pid 6476] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6470] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6479] memfd_create("syzkaller", 0 [pid 6477] <... munmap resumed>) = 0 [pid 6479] <... memfd_create resumed>) = 3 [pid 6478] memfd_create("syzkaller", 0 [pid 5066] getdents64(4, [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6478] <... memfd_create resumed>) = 3 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6477] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6471] <... creat resumed>) = 4 [pid 5066] getdents64(4, [pid 6478] <... mmap resumed>) = 0x7efd74b1c000 [pid 6477] <... openat resumed>) = 4 [ 144.321712][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 144.359566][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6471] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6477] ioctl(4, LOOP_SET_FD, 3 [pid 6471] <... futex resumed>) = 1 [pid 6470] <... futex resumed>) = 0 [pid 6478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6471] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] close(4 [pid 6470] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... write resumed>) = 524288 [pid 6471] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./77/bus") = 0 [pid 6477] <... ioctl resumed>) = 0 [pid 6477] close(3) = 0 [pid 6477] mkdir("./bus", 0777 [pid 6478] <... write resumed>) = 524288 [pid 6477] <... mkdir resumed>) = 0 [pid 5066] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6477] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6479] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6477] <... mount resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6477] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6477] chdir("./bus" [pid 6479] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6478] munmap(0x7efd74b1c000, 138412032 [pid 6477] <... chdir resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./77/bus", [pid 5066] unlink("./77/binderfs" [pid 6477] ioctl(4, LOOP_CLR_FD) = 0 [pid 6477] close(4) = 0 [pid 6477] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6477] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] <... openat resumed>) = 4 [pid 6474] <... futex resumed>) = 0 [pid 6474] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6477] <... futex resumed>) = 0 [pid 6477] creat("./bus", 000) = 4 [pid 6477] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6477] <... futex resumed>) = 0 [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 144.388123][ T6477] loop3: detected capacity change from 0 to 1024 [ 144.421447][ T6471] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6479] ioctl(4, LOOP_SET_FD, 3 [pid 6477] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6474] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... munmap resumed>) = 0 [pid 6474] <... futex resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6474] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 6479] <... ioctl resumed>) = 0 [pid 6478] <... openat resumed>) = 4 [pid 6479] close(3 [pid 6478] ioctl(4, LOOP_SET_FD, 3 [pid 6470] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6470] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6479] <... close resumed>) = 0 [ 144.441214][ T6471] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.448907][ T6479] loop4: detected capacity change from 0 to 1024 [ 144.450427][ T6471] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.461455][ T6477] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.481141][ T6471] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6479] mkdir("./bus", 0777) = 0 [pid 6479] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... openat resumed>) = 4 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] close(3 [pid 6474] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6470] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] newfstatat(4, "", [pid 5066] <... close resumed>) = 0 [pid 6474] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] rmdir("./77" [pid 6478] <... ioctl resumed>) = 0 [pid 6474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6470] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6478] close(3 [pid 6474] <... mmap resumed>) = 0x7efd7cefb000 [pid 6470] <... mprotect resumed>) = 0 [pid 5070] getdents64(4, [pid 5066] mkdir("./78", 0777 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6478] <... close resumed>) = 0 [pid 6474] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6470] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... mkdir resumed>) = 0 [pid 6474] <... mprotect resumed>) = 0 [pid 6474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6480]}, 88) = 6480 [ 144.488730][ T6477] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.498081][ T6478] loop2: detected capacity change from 0 to 1024 [ 144.506757][ T6477] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.509154][ T6471] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6474] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6480 attached [pid 6479] <... mount resumed>) = 0 [pid 6478] mkdir("./bus", 0777 [pid 6474] <... futex resumed>) = 0 [pid 6471] <... write resumed>) = 57344 [pid 6470] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] getdents64(4, [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6480] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6480] <... rseq resumed>) = 0 [pid 6479] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6478] <... mkdir resumed>) = 0 [pid 6474] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] close(4 [pid 5066] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6481 attached [pid 6480] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6479] <... openat resumed>) = 3 [pid 6478] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6471] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6481] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6480] <... set_robust_list resumed>) = 0 [pid 6479] chdir("./bus" [pid 6471] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] <... clone3 resumed> => {parent_tid=[6481]}, 88) = 6481 [pid 5070] rmdir("./77/bus" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6481] <... rseq resumed>) = 0 [pid 6480] rt_sigprocmask(SIG_SETMASK, [], [pid 6470] rt_sigprocmask(SIG_SETMASK, [], [pid 6481] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6479] <... chdir resumed>) = 0 [pid 6470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 6481] <... set_robust_list resumed>) = 0 [pid 6480] creat("./file1", 000 [pid 6470] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6481] rt_sigprocmask(SIG_SETMASK, [], [pid 6470] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6479] ioctl(4, LOOP_CLR_FD [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6479] <... ioctl resumed>) = 0 [pid 6479] close(4) = 0 [ 144.541090][ T6471] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.549472][ T6477] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6482 attached [pid 6481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6480] <... creat resumed>) = 5 [pid 6479] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... mount resumed>) = 0 [pid 6470] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6482] set_robust_list(0x555555fbc6a0, 24 [pid 6481] creat("./file1", 000 [pid 6480] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6482 [pid 6482] <... set_robust_list resumed>) = 0 [pid 6480] <... futex resumed>) = 1 [pid 6474] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6480] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] <... openat resumed>) = 3 [pid 6479] <... futex resumed>) = 1 [pid 6482] chdir("./78" [pid 6476] <... futex resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6482] <... chdir resumed>) = 0 [pid 6476] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6479] creat("./bus", 000 [pid 6478] chdir("./bus" [pid 6476] <... futex resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6482] <... prctl resumed>) = 0 [pid 6478] <... chdir resumed>) = 0 [pid 6476] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] unlink("./77/binderfs" [pid 6481] <... creat resumed>) = 5 [pid 6482] setpgid(0, 0 [pid 6481] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... creat resumed>) = 4 [pid 6478] ioctl(4, LOOP_CLR_FD [pid 5070] <... unlink resumed>) = 0 [pid 6482] <... setpgid resumed>) = 0 [pid 6481] <... futex resumed>) = 1 [pid 6479] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... ioctl resumed>) = 0 [pid 6470] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 6482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6481] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] <... futex resumed>) = 1 [pid 6478] close(4 [pid 6476] <... futex resumed>) = 0 [pid 6470] exit_group(0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6482] <... openat resumed>) = 3 [pid 6481] <... futex resumed>) = ? [pid 6479] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] <... close resumed>) = 0 [pid 6476] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = ? [pid 6470] <... exit_group resumed>) = ? [pid 5070] close(3 [pid 6482] write(3, "1000", 4 [pid 6481] +++ exited with 0 +++ [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] <... futex resumed>) = 0 [pid 6471] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 6482] <... write resumed>) = 4 [pid 6479] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6478] <... futex resumed>) = 1 [pid 6475] <... futex resumed>) = 0 [pid 6470] +++ exited with 0 +++ [pid 5070] rmdir("./77" [pid 6482] close(3 [pid 6478] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6475] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6470, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6482] <... close resumed>) = 0 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6476] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 6482] symlink("/dev/binderfs", "./binderfs" [pid 6478] creat("./bus", 000 [pid 6475] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 144.589839][ T6477] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.624840][ T6479] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] mkdir("./78", 0777 [pid 6482] <... symlink resumed>) = 0 [pid 6478] <... creat resumed>) = 4 [pid 5070] <... mkdir resumed>) = 0 [pid 5065] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] close(3) = 0 [pid 6482] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6477] <... write resumed>) = 57344 [pid 6477] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6474] exit_group(0 [pid 6482] <... futex resumed>) = 0 [pid 6480] <... futex resumed>) = ? [pid 6478] <... futex resumed>) = 1 [pid 6475] <... futex resumed>) = 0 [pid 6474] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 6483 attached [pid 6482] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6480] +++ exited with 0 +++ [pid 6478] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] +++ exited with 0 +++ [pid 6475] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6483] set_robust_list(0x555555fbc6a0, 24 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6483] <... set_robust_list resumed>) = 0 [ 144.633832][ T6477] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6482] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6478] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6475] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6483 [pid 6474] +++ exited with 0 +++ [pid 6476] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6476] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6476] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6476] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6484]}, 88) = 6484 ./strace-static-x86_64: Process 6484 attached [pid 6476] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6474, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6484] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6483] chdir("./78" [pid 6476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6484] <... rseq resumed>) = 0 [pid 6476] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6484] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6476] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6484] <... set_robust_list resumed>) = 0 [pid 6476] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6484] creat("./file1", 000 [pid 5068] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6475] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... openat resumed>) = 3 [pid 6482] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5068] newfstatat(3, "", [pid 6482] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6485 attached => {parent_tid=[6485]}, 88) = 6485 [pid 6485] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6482] rt_sigprocmask(SIG_SETMASK, [], [pid 6485] <... rseq resumed>) = 0 [pid 6482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6485] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6482] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6485] <... set_robust_list resumed>) = 0 [pid 6482] <... futex resumed>) = 0 [pid 6483] <... chdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6482] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] getdents64(3, [pid 6485] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6485] memfd_create("syzkaller", 0) = 3 [pid 6485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [ 144.671352][ T6479] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.679011][ T6479] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.696244][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 5068] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6476] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6475] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6483] <... prctl resumed>) = 0 [pid 6483] setpgid(0, 0 [pid 6475] <... futex resumed>) = 0 [pid 6483] <... setpgid resumed>) = 0 [pid 6475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6484] <... creat resumed>) = 5 [pid 6475] <... mmap resumed>) = 0x7efd7cefb000 [pid 6475] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6475] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6484] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6486 attached [pid 6484] <... futex resumed>) = 0 [pid 6483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... umount2 resumed>) = 0 [pid 6484] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6475] <... clone3 resumed> => {parent_tid=[6486]}, 88) = 6486 [pid 6486] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6475] rt_sigprocmask(SIG_SETMASK, [], [pid 6486] <... rseq resumed>) = 0 [pid 6475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6475] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6486] <... set_robust_list resumed>) = 0 [pid 6475] <... futex resumed>) = 0 [pid 6486] rt_sigprocmask(SIG_SETMASK, [], [pid 6475] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] creat("./file1", 000 [pid 6483] <... openat resumed>) = 3 [pid 5065] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./76/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6483] write(3, "1000", 4 [ 144.724006][ T6478] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.741083][ T6479] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.750335][ T6478] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.761937][ T6479] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] <... openat resumed>) = 4 [pid 6486] <... creat resumed>) = 5 [pid 6485] <... write resumed>) = 524288 [pid 6483] <... write resumed>) = 4 [pid 6486] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(4, "", [pid 6486] <... futex resumed>) = 1 [pid 6475] <... futex resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6486] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 6485] munmap(0x7efd74b1c000, 138412032 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6485] <... munmap resumed>) = 0 [pid 5065] close(4 [pid 6483] close(3 [pid 5065] <... close resumed>) = 0 [pid 6485] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6483] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] rmdir("./76/bus" [pid 6485] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 6485] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6483] symlink("/dev/binderfs", "./binderfs" [pid 6479] <... write resumed>) = 57344 [pid 5068] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./76/binderfs") = 0 [pid 6483] <... symlink resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6479] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6479] <... futex resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./78/bus", [pid 6483] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6483] <... futex resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6483] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6476] exit_group(0 [pid 5065] close(3 [pid 6483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6484] <... futex resumed>) = ? [pid 6483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6479] <... futex resumed>) = ? [pid 6476] <... exit_group resumed>) = ? [ 144.770685][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 144.779208][ T6479] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.798910][ T6478] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.801195][ T6485] loop1: detected capacity change from 0 to 1024 [ 144.807045][ T6478] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 6484] +++ exited with 0 +++ [pid 6483] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6479] +++ exited with 0 +++ [pid 6476] +++ exited with 0 +++ [pid 5065] rmdir("./76") = 0 [pid 5065] mkdir("./77", 0777) = 0 [pid 6483] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6476, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6483] <... mprotect resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 6483] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6483] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 4 [pid 6483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(4, "", [pid 5069] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] <... openat resumed>) = 3 [pid 5068] getdents64(4, [pid 6483] <... clone3 resumed> => {parent_tid=[6487]}, 88) = 6487 ./strace-static-x86_64: Process 6488 attached ./strace-static-x86_64: Process 6487 attached [pid 6483] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] newfstatat(3, "", [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6488 [pid 6488] set_robust_list(0x555555fbc6a0, 24 [pid 6487] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, [pid 6488] <... set_robust_list resumed>) = 0 [pid 6487] <... rseq resumed>) = 0 [pid 6483] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, [pid 6488] chdir("./77" [pid 6487] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6483] <... futex resumed>) = 0 [pid 6478] <... write resumed>) = 57344 [pid 5068] close(4 [pid 6488] <... chdir resumed>) = 0 [pid 6487] <... set_robust_list resumed>) = 0 [pid 6483] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6478] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 6488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6487] rt_sigprocmask(SIG_SETMASK, [], [pid 6485] <... ioctl resumed>) = 0 [pid 6478] <... futex resumed>) = 0 [pid 6475] exit_group(0 [pid 5068] rmdir("./78/bus" [pid 6488] <... prctl resumed>) = 0 [pid 6487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6486] <... futex resumed>) = ? [pid 6485] close(3 [pid 6475] <... exit_group resumed>) = ? [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6488] setpgid(0, 0 [pid 6486] +++ exited with 0 +++ [pid 6488] <... setpgid resumed>) = 0 [pid 6487] memfd_create("syzkaller", 0 [pid 5069] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... rmdir resumed>) = 0 [ 144.826214][ T6478] hfsplus: request for non-existent node 16715520 in B*Tree [ 144.834725][ T6478] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6487] <... memfd_create resumed>) = 3 [pid 5068] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6485] <... close resumed>) = 0 [pid 6478] +++ exited with 0 +++ [pid 6475] +++ exited with 0 +++ [pid 6488] <... openat resumed>) = 3 [pid 6485] mkdir("./bus", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6475, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6488] write(3, "1000", 4 [pid 6487] <... mmap resumed>) = 0x7efd74b1c000 [pid 6485] <... mkdir resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6488] <... write resumed>) = 4 [pid 6485] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6488] close(3 [pid 5068] unlink("./78/binderfs" [pid 6488] <... close resumed>) = 0 [pid 6488] symlink("/dev/binderfs", "./binderfs" [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6488] <... symlink resumed>) = 0 [pid 6487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(3, [pid 5067] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6488] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6488] <... futex resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./77/bus", [pid 5068] close(3 [pid 5067] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6488] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6488] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5069] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./78" [pid 5067] newfstatat(3, "", [pid 6488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6487] <... write resumed>) = 524288 [pid 5069] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] mkdir("./79", 0777 [pid 5067] getdents64(3, [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... mkdir resumed>) = 0 [pid 6488] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6485] <... mount resumed>) = 0 [pid 5067] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 4 [pid 6488] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6487] munmap(0x7efd74b1c000, 138412032 [ 144.873817][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6488] <... mprotect resumed>) = 0 [pid 6487] <... munmap resumed>) = 0 [pid 6485] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] newfstatat(4, "", [pid 5068] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5069] getdents64(4, [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6488] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6485] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] close(3 [pid 6488] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... close resumed>) = 0 [pid 6488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] getdents64(4, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6489 attached [pid 6485] chdir("./bus" [pid 6489] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6488] <... clone3 resumed> => {parent_tid=[6489]}, 88) = 6489 [pid 6485] <... chdir resumed>) = 0 [pid 6489] <... rseq resumed>) = 0 [pid 6488] rt_sigprocmask(SIG_SETMASK, [], [pid 6485] ioctl(4, LOOP_CLR_FD [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6489] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6485] <... ioctl resumed>) = 0 [pid 6489] <... set_robust_list resumed>) = 0 [pid 6488] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(4 [pid 6489] rt_sigprocmask(SIG_SETMASK, [], [pid 6485] close(4 [pid 6489] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6488] <... futex resumed>) = 0 [pid 6485] <... close resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6490 [pid 6489] memfd_create("syzkaller", 0 [pid 6488] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6487] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6485] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6490 attached [pid 6489] <... memfd_create resumed>) = 3 [pid 6485] <... futex resumed>) = 1 [pid 6482] <... futex resumed>) = 0 [pid 5069] rmdir("./77/bus" [pid 6490] set_robust_list(0x555555fbc6a0, 24 [pid 6489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6487] <... openat resumed>) = 4 [pid 6485] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6482] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... set_robust_list resumed>) = 0 [pid 6489] <... mmap resumed>) = 0x7efd74b1c000 [pid 6485] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6482] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6490] chdir("./79" [pid 6487] ioctl(4, LOOP_SET_FD, 3 [pid 6485] creat("./bus", 000 [pid 5069] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] <... chdir resumed>) = 0 [pid 6485] <... creat resumed>) = 4 [pid 6482] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6485] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6485] <... futex resumed>) = 0 [pid 6482] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6490] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6490] setpgid(0, 0 [pid 6485] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6482] <... futex resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6490] <... setpgid resumed>) = 0 [ 144.944673][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 144.966778][ T6487] loop5: detected capacity change from 0 to 1024 [pid 6490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6489] <... write resumed>) = 524288 [pid 6487] <... ioctl resumed>) = 0 [pid 6482] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./77/binderfs") = 0 [pid 6490] <... openat resumed>) = 3 [pid 5069] getdents64(3, [pid 6487] close(3) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6490] write(3, "1000", 4 [pid 6487] mkdir("./bus", 0777 [pid 6490] <... write resumed>) = 4 [pid 5069] close(3 [pid 5067] <... umount2 resumed>) = 0 [pid 6489] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./77" [pid 6489] <... munmap resumed>) = 0 [pid 6487] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6490] close(3 [pid 5067] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] <... close resumed>) = 0 [pid 6487] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] mkdir("./78", 0777 [pid 6490] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6490] <... symlink resumed>) = 0 [pid 6489] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] <... mkdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./76/bus", [pid 6490] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... openat resumed>) = 4 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 144.994448][ T6485] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6490] <... futex resumed>) = 0 [pid 6489] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... openat resumed>) = 3 [pid 5067] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6490] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6487] <... mount resumed>) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6487] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6490] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6487] <... openat resumed>) = 3 [pid 6482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] close(3 [pid 5067] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6482] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 6490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6487] chdir("./bus" [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6487] <... chdir resumed>) = 0 [pid 6482] <... futex resumed>) = 0 [pid 6482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6482] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6491 attached [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6487] ioctl(4, LOOP_CLR_FD [pid 6482] <... mprotect resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6482] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] getdents64(4, [pid 6490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6487] <... ioctl resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6491 [pid 6487] close(4 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6490] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6482] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6487] <... close resumed>) = 0 [pid 6490] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6487] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6489] <... ioctl resumed>) = 0 [pid 6482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6487] <... futex resumed>) = 1 [pid 6483] <... futex resumed>) = 0 [pid 6483] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6483] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6487] creat("./bus", 000 [pid 6490] <... mprotect resumed>) = 0 [pid 5067] getdents64(4, ./strace-static-x86_64: Process 6492 attached [pid 6491] set_robust_list(0x555555fbc6a0, 24 [pid 6490] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6489] close(3 [pid 6487] <... creat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6492] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6491] <... set_robust_list resumed>) = 0 [pid 6490] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6489] <... close resumed>) = 0 [pid 6487] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... clone3 resumed> => {parent_tid=[6492]}, 88) = 6492 [pid 5067] close(4 [pid 6492] <... rseq resumed>) = 0 [pid 6490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [ 145.036870][ T6485] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.062256][ T6489] loop0: detected capacity change from 0 to 1024 [pid 6489] mkdir("./bus", 0777 [pid 6482] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6493 attached [pid 6492] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6491] chdir("./78" [pid 6489] <... mkdir resumed>) = 0 [pid 6487] <... futex resumed>) = 1 [pid 6483] <... futex resumed>) = 0 [pid 5067] rmdir("./76/bus" [pid 6493] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6491] <... chdir resumed>) = 0 [pid 6490] <... clone3 resumed> => {parent_tid=[6493]}, 88) = 6493 [pid 6483] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] <... rseq resumed>) = 0 [pid 6492] <... set_robust_list resumed>) = 0 [pid 6491] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6490] rt_sigprocmask(SIG_SETMASK, [], [pid 6489] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6487] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6483] <... futex resumed>) = 0 [pid 6482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6493] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6492] rt_sigprocmask(SIG_SETMASK, [], [pid 6491] <... prctl resumed>) = 0 [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6483] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6482] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6493] <... set_robust_list resumed>) = 0 [pid 6492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6491] setpgid(0, 0 [pid 6490] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6482] <... futex resumed>) = 0 [pid 6493] rt_sigprocmask(SIG_SETMASK, [], [pid 6491] <... setpgid resumed>) = 0 [pid 6490] <... futex resumed>) = 0 [pid 6493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6492] creat("./file1", 000 [pid 6482] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6493] memfd_create("syzkaller", 0 [pid 6491] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6490] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6493] <... memfd_create resumed>) = 3 [pid 6491] <... openat resumed>) = 3 [pid 5067] newfstatat(AT_FDCWD, "./76/binderfs", [pid 6489] <... mount resumed>) = 0 [pid 6489] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6489] chdir("./bus") = 0 [pid 6489] ioctl(4, LOOP_CLR_FD) = 0 [pid 6489] close(4) = 0 [pid 6489] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6488] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6489] <... futex resumed>) = 1 [ 145.095968][ T6485] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6489] creat("./bus", 000) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6491] write(3, "1000", 4 [pid 5067] unlink("./76/binderfs" [pid 6489] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6489] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] <... futex resumed>) = 0 [pid 6488] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6489] <... futex resumed>) = 0 [pid 6489] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6488] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6492] <... creat resumed>) = 5 [pid 6493] <... mmap resumed>) = 0x7efd74b1c000 [pid 6491] <... write resumed>) = 4 [pid 6483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... unlink resumed>) = 0 [pid 6493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6491] close(3 [pid 6483] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(3, [pid 6482] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 145.137164][ T6487] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.145705][ T6485] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.149859][ T6487] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.161692][ T6487] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.170229][ T6485] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.171975][ T6487] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.182218][ T6489] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6492] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] <... close resumed>) = 0 [pid 6483] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] close(3 [pid 6491] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 6492] <... futex resumed>) = 0 [pid 6491] <... symlink resumed>) = 0 [pid 6483] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] rmdir("./76" [pid 6492] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6493] <... write resumed>) = 524288 [pid 6483] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./77", 0777 [pid 6483] <... mprotect resumed>) = 0 [pid 6483] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6483] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6491] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6491] <... futex resumed>) = 0 [pid 6488] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6488] <... futex resumed>) = 0 [pid 5067] close(3./strace-static-x86_64: Process 6494 attached [pid 6488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6494] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6488] <... mmap resumed>) = 0x7efd7cefb000 [pid 6488] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6494] <... rseq resumed>) = 0 [pid 6488] <... mprotect resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 6494] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6493] munmap(0x7efd74b1c000, 138412032 [pid 6491] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6488] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6483] <... clone3 resumed> => {parent_tid=[6494]}, 88) = 6494 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6491] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6483] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6495 attached [pid 6493] <... munmap resumed>) = 0 [pid 6491] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6488] <... rt_sigprocmask resumed>[], 8) = 0 [ 145.216800][ T6485] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.242264][ T6489] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] set_robust_list(0x555555fbc6a0, 24 [pid 6494] <... set_robust_list resumed>) = 0 [pid 6493] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6488] <... clone3 resumed> => {parent_tid=[6496]}, 88) = 6496 [pid 6494] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6496 attached [pid 6495] <... set_robust_list resumed>) = 0 [pid 6493] <... openat resumed>) = 4 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6488] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6483] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6495 [pid 6483] <... futex resumed>) = 1 [pid 6491] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6483] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6496] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6495] chdir("./77" [pid 6494] <... futex resumed>) = 0 [pid 6493] ioctl(4, LOOP_SET_FD, 3 [pid 6491] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6488] <... futex resumed>) = 0 [pid 6485] <... write resumed>) = 57344 [pid 6491] <... mprotect resumed>) = 0 [pid 6496] <... rseq resumed>) = 0 [pid 6495] <... chdir resumed>) = 0 [pid 6494] creat("./file1", 000 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6488] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6485] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6491] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6496] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6485] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] <... prctl resumed>) = 0 [pid 6482] exit_group(0 [pid 6492] <... futex resumed>) = ? [pid 6482] <... exit_group resumed>) = ? [pid 6495] setpgid(0, 0./strace-static-x86_64: Process 6497 attached [pid 6485] <... futex resumed>) = ? [pid 6497] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6496] <... set_robust_list resumed>) = 0 [pid 6495] <... setpgid resumed>) = 0 [pid 6493] <... ioctl resumed>) = 0 [pid 6492] +++ exited with 0 +++ [pid 6491] <... clone3 resumed> => {parent_tid=[6497]}, 88) = 6497 [pid 6485] +++ exited with 0 +++ [pid 6482] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6482, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6491] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6497] <... rseq resumed>) = 0 [pid 6496] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] <... openat resumed>) = 3 [pid 6493] close(3 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6497] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] write(3, "1000", 4 [pid 6493] <... close resumed>) = 0 [pid 6491] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] <... set_robust_list resumed>) = 0 [pid 6496] creat("./file1", 000 [pid 6495] <... write resumed>) = 4 [pid 6493] mkdir("./bus", 0777 [pid 6491] <... futex resumed>) = 0 [pid 6497] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 145.261248][ T6487] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.268572][ T6487] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.273562][ T6489] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.293280][ T6493] loop3: detected capacity change from 0 to 1024 [pid 6497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] <... close resumed>) = 0 [pid 6494] <... creat resumed>) = 5 [pid 6493] <... mkdir resumed>) = 0 [pid 6491] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] memfd_create("syzkaller", 0) = 3 [pid 6495] symlink("/dev/binderfs", "./binderfs" [pid 6494] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... openat resumed>) = 3 [pid 6497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6494] <... futex resumed>) = 0 [pid 6494] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6497] <... mmap resumed>) = 0x7efd74b1c000 [pid 6495] <... symlink resumed>) = 0 [pid 6493] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] newfstatat(3, "", [pid 6497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6495] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6487] <... write resumed>) = 57344 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6495] <... futex resumed>) = 0 [pid 5066] getdents64(3, [pid 6495] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6495] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6495] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6488] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6487] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6487] <... futex resumed>) = 0 [ 145.323525][ T6489] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6495] <... mprotect resumed>) = 0 [pid 6483] exit_group(0 [pid 6497] <... write resumed>) = 524288 [pid 6487] ???( [pid 6483] <... exit_group resumed>) = ? [pid 6494] <... futex resumed>) = ? [pid 6495] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6494] +++ exited with 0 +++ [pid 6495] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6487] <... ??? resumed>) = ? [pid 6496] <... creat resumed>) = 5 [pid 6495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6496] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6498 attached [pid 6497] munmap(0x7efd74b1c000, 138412032 [pid 6496] <... futex resumed>) = 0 [pid 6493] <... mount resumed>) = 0 [pid 6487] +++ exited with 0 +++ [pid 6483] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6483, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6498] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6497] <... munmap resumed>) = 0 [pid 6496] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6495] <... clone3 resumed> => {parent_tid=[6498]}, 88) = 6498 [pid 6493] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6498] <... rseq resumed>) = 0 [pid 6495] rt_sigprocmask(SIG_SETMASK, [], [pid 6493] <... openat resumed>) = 3 [pid 6498] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6493] chdir("./bus" [pid 5070] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6493] <... chdir resumed>) = 0 [pid 6498] <... set_robust_list resumed>) = 0 [pid 6495] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] <... futex resumed>) = 0 [pid 6493] ioctl(4, LOOP_CLR_FD [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6498] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6495] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6493] <... ioctl resumed>) = 0 [pid 6498] memfd_create("syzkaller", 0 [pid 6497] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6493] close(4 [pid 5070] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6497] <... openat resumed>) = 4 [pid 6498] <... memfd_create resumed>) = 3 [pid 6497] ioctl(4, LOOP_SET_FD, 3 [pid 6493] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = 0 [pid 6498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6493] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(3, "", [pid 6493] <... futex resumed>) = 1 [pid 6490] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6490] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6498] <... mmap resumed>) = 0x7efd74b1c000 [ 145.365230][ T47] hfsplus: b-tree write err: -5, ino 4 [ 145.397969][ T6489] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] newfstatat(AT_FDCWD, "./78/bus", [pid 6498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6493] creat("./bus", 000 [pid 6490] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6493] <... creat resumed>) = 4 [pid 6490] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6493] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6498] <... write resumed>) = 524288 [pid 6493] <... futex resumed>) = 1 [pid 6490] <... futex resumed>) = 0 [pid 6489] <... write resumed>) = 57344 [pid 5066] <... openat resumed>) = 4 [pid 6493] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6490] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] newfstatat(4, "", [pid 6490] <... futex resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6490] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [ 145.437013][ T6489] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.467719][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 6498] munmap(0x7efd74b1c000, 138412032 [pid 6489] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] close(4 [pid 6498] <... munmap resumed>) = 0 [pid 6489] <... futex resumed>) = 0 [pid 6488] exit_group(0 [pid 5070] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./78/bus" [pid 6497] <... ioctl resumed>) = 0 [pid 6497] close(3) = 0 [pid 6497] mkdir("./bus", 0777) = 0 [pid 6496] <... futex resumed>) = ? [pid 6488] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5066] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6496] +++ exited with 0 +++ [pid 5070] newfstatat(AT_FDCWD, "./78/bus", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6497] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] unlink("./78/binderfs" [pid 6490] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... unlink resumed>) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [ 145.487965][ T6497] loop4: detected capacity change from 0 to 1024 [ 145.494739][ T6493] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.511077][ T6493] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] close(3) = 0 [pid 6498] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6490] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6498] <... openat resumed>) = 4 [pid 6490] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] <... openat resumed>) = 4 [pid 6498] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6490] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6489] +++ exited with 0 +++ [pid 6488] +++ exited with 0 +++ [pid 5070] newfstatat(4, "", [pid 6490] <... mprotect resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6490] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] getdents64(4, [pid 5066] rmdir("./78" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6488, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 6497] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6497] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6490] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] mkdir("./79", 0777 [pid 5070] getdents64(4, ./strace-static-x86_64: Process 6499 attached [pid 6497] <... openat resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 6490] <... clone3 resumed> => {parent_tid=[6499]}, 88) = 6499 [pid 6497] chdir("./bus" [pid 5070] close(4 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6497] <... chdir resumed>) = 0 [pid 6490] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... close resumed>) = 0 [pid 6497] ioctl(4, LOOP_CLR_FD [pid 6490] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 145.531384][ T6493] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.542516][ T6493] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.553999][ T6498] loop2: detected capacity change from 0 to 1024 [ 145.568455][ T6493] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.579168][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 5070] rmdir("./78/bus" [pid 6499] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6497] <... ioctl resumed>) = 0 [pid 6490] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6490] <... futex resumed>) = 0 [pid 6499] <... rseq resumed>) = 0 [pid 6490] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6499] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6498] close(3 [pid 6497] close(4 [pid 5070] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6499] rt_sigprocmask(SIG_SETMASK, [], [pid 6498] <... close resumed>) = 0 [pid 6497] <... close resumed>) = 0 [pid 6493] <... write resumed>) = 57344 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6497] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6493] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6493] <... futex resumed>) = 0 [pid 5066] close(3 [pid 6499] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6498] mkdir("./bus", 0777 [pid 6497] <... futex resumed>) = 1 [pid 6493] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] <... futex resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6499] creat("./file1", 000 [pid 6491] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6497] creat("./bus", 000 [ 145.588942][ T6493] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] unlink("./78/binderfs"./strace-static-x86_64: Process 6500 attached [pid 6499] <... creat resumed>) = 5 [pid 6498] <... mkdir resumed>) = 0 [pid 6497] <... creat resumed>) = 4 [pid 6491] <... futex resumed>) = 0 [pid 6490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... unlink resumed>) = 0 [pid 5065] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6491] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./77/bus", [pid 6500] set_robust_list(0x555555fbc6a0, 24 [pid 6499] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6498] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6497] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6500 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6500] <... set_robust_list resumed>) = 0 [pid 6499] <... futex resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 6499] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6491] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6500] chdir("./79" [pid 6497] <... futex resumed>) = 1 [pid 6491] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6500] <... chdir resumed>) = 0 [pid 6491] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6490] exit_group(0 [pid 5070] <... close resumed>) = 0 [pid 6500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] rmdir("./78" [pid 6499] <... futex resumed>) = ? [pid 6497] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6490] <... exit_group resumed>) = ? [pid 6499] +++ exited with 0 +++ [pid 5070] <... rmdir resumed>) = 0 [pid 5065] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6493] <... futex resumed>) = ? [pid 6500] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] setpgid(0, 0 [pid 5065] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6500] <... setpgid resumed>) = 0 [pid 5070] mkdir("./79", 0777 [pid 6500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6500] <... openat resumed>) = 3 [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6500] write(3, "1000", 4 [pid 6493] +++ exited with 0 +++ [pid 6490] +++ exited with 0 +++ [pid 5070] <... mkdir resumed>) = 0 [pid 5065] close(4 [pid 6498] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./77/bus" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6490, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] <... rmdir resumed>) = 0 [pid 6498] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6498] chdir("./bus") = 0 [pid 6498] ioctl(4, LOOP_CLR_FD) = 0 [pid 6498] close(4) = 0 [pid 6498] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6495] <... futex resumed>) = 0 [pid 6495] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6495] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6498] creat("./bus", 000) = 4 [pid 6498] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6498] <... futex resumed>) = 1 [pid 6495] <... futex resumed>) = 0 [pid 6495] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6495] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6498] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./77/binderfs" [pid 6500] <... write resumed>) = 4 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... unlink resumed>) = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 6500] close(3 [pid 6491] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... openat resumed>) = 3 [pid 5068] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./77") = 0 [pid 5065] mkdir("./78", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6500] <... close resumed>) = 0 [pid 6500] symlink("/dev/binderfs", "./binderfs" [pid 6491] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 6491] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6500] <... symlink resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6491] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] newfstatat(3, "", [pid 6491] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6501 attached [pid 6500] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] getdents64(3, [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6501 [ 145.696140][ T6497] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.715292][ T6497] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.720512][ T6498] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.729588][ T6497] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.738437][ T6497] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6500] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6491] <... mprotect resumed>) = 0 [pid 6500] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6501] set_robust_list(0x555555fbc6a0, 24 [pid 6500] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6502 [pid 6500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6491] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6500] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6491] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6502 attached [pid 6495] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6491] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6502] set_robust_list(0x555555fbc6a0, 24 [pid 6495] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6491] <... clone3 resumed> => {parent_tid=[6503]}, 88) = 6503 ./strace-static-x86_64: Process 6503 attached [pid 6502] <... set_robust_list resumed>) = 0 [pid 6501] <... set_robust_list resumed>) = 0 [pid 6500] <... mprotect resumed>) = 0 [pid 6495] <... futex resumed>) = 0 [pid 6491] rt_sigprocmask(SIG_SETMASK, [], [pid 6503] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6502] chdir("./78" [pid 6501] chdir("./79" [pid 6500] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6502] <... chdir resumed>) = 0 [pid 6495] <... mmap resumed>) = 0x7efd7cefb000 [pid 6502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6495] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6502] <... prctl resumed>) = 0 [pid 6495] <... mprotect resumed>) = 0 [pid 6502] setpgid(0, 0 [pid 6495] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6502] <... setpgid resumed>) = 0 [pid 6495] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6502] <... openat resumed>) = 3 [pid 6503] <... rseq resumed>) = 0 [pid 6502] write(3, "1000", 4 [pid 6501] <... chdir resumed>) = 0 [pid 6500] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6495] <... clone3 resumed> => {parent_tid=[6504]}, 88) = 6504 [pid 6491] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6504 attached [pid 6503] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6491] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6505 attached [pid 6504] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6503] <... set_robust_list resumed>) = 0 [pid 6501] <... prctl resumed>) = 0 [pid 6495] rt_sigprocmask(SIG_SETMASK, [], [pid 6491] <... futex resumed>) = 0 [pid 6505] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6503] rt_sigprocmask(SIG_SETMASK, [], [pid 6501] setpgid(0, 0 [pid 6491] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6505] <... rseq resumed>) = 0 [pid 6503] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6501] <... setpgid resumed>) = 0 [pid 6505] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6503] creat("./file1", 000 [pid 6505] <... set_robust_list resumed>) = 0 [pid 6504] <... rseq resumed>) = 0 [pid 6502] <... write resumed>) = 4 [pid 6501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6505] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6502] close(3 [pid 6501] <... openat resumed>) = 3 [pid 6495] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] <... set_robust_list resumed>) = 0 [pid 6502] <... close resumed>) = 0 [pid 6501] write(3, "1000", 4 [pid 6500] <... clone3 resumed> => {parent_tid=[6505]}, 88) = 6505 [pid 6495] <... futex resumed>) = 0 [pid 6504] rt_sigprocmask(SIG_SETMASK, [], [pid 6502] symlink("/dev/binderfs", "./binderfs" [pid 6501] <... write resumed>) = 4 [pid 6500] rt_sigprocmask(SIG_SETMASK, [], [pid 6495] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6502] <... symlink resumed>) = 0 [pid 6501] close(3 [pid 6500] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6504] creat("./file1", 000 [pid 6502] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... close resumed>) = 0 [ 145.749342][ T6498] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.776827][ T6497] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.783568][ T6498] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.786715][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 6500] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] <... futex resumed>) = 0 [pid 6502] <... futex resumed>) = 0 [pid 6501] symlink("/dev/binderfs", "./binderfs" [pid 6500] <... futex resumed>) = 1 [pid 6502] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6505] memfd_create("syzkaller", 0 [pid 6502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6501] <... symlink resumed>) = 0 [pid 6500] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6505] <... memfd_create resumed>) = 3 [pid 6502] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6501] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6502] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6501] <... futex resumed>) = 0 [pid 6505] <... mmap resumed>) = 0x7efd74b1c000 [pid 6502] <... mprotect resumed>) = 0 [pid 6501] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6502] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6503] <... creat resumed>) = 5 [pid 6502] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6501] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6503] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6501] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6503] <... futex resumed>) = 1 [pid 6501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6491] <... futex resumed>) = 0 [pid 6503] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6501] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6502] <... clone3 resumed> => {parent_tid=[6506]}, 88) = 6506 ./strace-static-x86_64: Process 6506 attached [pid 6505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6502] rt_sigprocmask(SIG_SETMASK, [], [pid 6501] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6497] <... write resumed>) = 57344 [pid 6506] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6502] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6497] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... rseq resumed>) = 0 [pid 6502] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6497] <... futex resumed>) = 0 [pid 6506] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6502] <... futex resumed>) = 0 [pid 6501] <... mprotect resumed>) = 0 [pid 6497] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6506] <... set_robust_list resumed>) = 0 [pid 6502] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6506] rt_sigprocmask(SIG_SETMASK, [], [pid 6491] exit_group(0 [pid 6506] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6503] <... futex resumed>) = ? [pid 6491] <... exit_group resumed>) = ? [pid 6506] memfd_create("syzkaller", 0 [pid 6503] +++ exited with 0 +++ [pid 6501] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6506] <... memfd_create resumed>) = 3 [pid 6506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6501] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6497] <... futex resumed>) = ? [pid 6495] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 145.811683][ T6497] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.826773][ T6498] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6507 attached [pid 6505] <... write resumed>) = 524288 [pid 6507] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6501] <... clone3 resumed> => {parent_tid=[6507]}, 88) = 6507 [pid 6497] +++ exited with 0 +++ [pid 6491] +++ exited with 0 +++ [pid 6507] <... rseq resumed>) = 0 [pid 6501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6507] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6491, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5068] <... umount2 resumed>) = 0 [pid 6507] <... set_robust_list resumed>) = 0 [pid 6501] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6507] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6501] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6507] memfd_create("syzkaller", 0 [pid 6505] munmap(0x7efd74b1c000, 138412032 [pid 6501] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6507] <... memfd_create resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5068] newfstatat(AT_FDCWD, "./79/bus", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6506] <... write resumed>) = 524288 [pid 6505] <... munmap resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6507] <... mmap resumed>) = 0x7efd74b1c000 [pid 6505] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6505] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 4 [pid 6505] ioctl(4, LOOP_SET_FD, 3 [pid 5068] newfstatat(4, "", [pid 6506] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6506] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 145.865271][ T6498] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.901538][ T6498] hfsplus: request for non-existent node 16715520 in B*Tree [ 145.909702][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6506] <... openat resumed>) = 4 [pid 6506] ioctl(4, LOOP_SET_FD, 3 [pid 6507] <... write resumed>) = 524288 [pid 6505] <... ioctl resumed>) = 0 [pid 5068] close(4 [pid 6507] munmap(0x7efd74b1c000, 138412032 [pid 6505] close(3 [pid 6504] <... creat resumed>) = 5 [pid 6498] <... write resumed>) = 57344 [pid 5068] <... close resumed>) = 0 [pid 6505] <... close resumed>) = 0 [pid 5068] rmdir("./79/bus" [pid 6505] mkdir("./bus", 0777 [pid 6504] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6504] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6505] <... mkdir resumed>) = 0 [pid 6498] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6495] exit_group(0 [pid 5068] <... rmdir resumed>) = 0 [pid 6504] <... futex resumed>) = ? [pid 6495] <... exit_group resumed>) = ? [pid 6507] <... munmap resumed>) = 0 [pid 6505] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6504] +++ exited with 0 +++ [pid 6498] <... futex resumed>) = ? [pid 5068] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./79/binderfs" [pid 6507] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5068] <... unlink resumed>) = 0 [pid 6507] ioctl(4, LOOP_SET_FD, 3 [pid 6506] <... ioctl resumed>) = 0 [pid 6505] <... mount resumed>) = 0 [pid 6498] +++ exited with 0 +++ [pid 6495] +++ exited with 0 +++ [pid 5068] getdents64(3, [pid 6505] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [ 145.917622][ T6505] loop1: detected capacity change from 0 to 1024 [ 145.936609][ T6506] loop0: detected capacity change from 0 to 1024 [pid 6506] close(3) = 0 [pid 6506] mkdir("./bus", 0777) = 0 [pid 6505] chdir("./bus") = 0 [pid 6507] <... ioctl resumed>) = 0 [pid 5069] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6507] close(3 [pid 6505] ioctl(4, LOOP_CLR_FD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6495, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6507] <... close resumed>) = 0 [pid 6505] <... ioctl resumed>) = 0 [pid 5067] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./78/bus", [pid 6507] mkdir("./bus", 0777 [pid 6505] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6506] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] close(3 [pid 6507] <... mkdir resumed>) = 0 [pid 6505] <... close resumed>) = 0 [pid 5069] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6507] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6505] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6505] <... futex resumed>) = 1 [pid 5067] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6500] <... futex resumed>) = 0 [pid 6500] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5068] rmdir("./79" [pid 6505] creat("./bus", 000 [pid 6500] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(4, "", [pid 5068] <... rmdir resumed>) = 0 [pid 6505] <... creat resumed>) = 4 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] mkdir("./80", 0777 [pid 5069] getdents64(4, [pid 5068] <... mkdir resumed>) = 0 [pid 6505] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6505] <... futex resumed>) = 1 [pid 6500] <... futex resumed>) = 0 [pid 6505] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] getdents64(4, [pid 6507] <... mount resumed>) = 0 [pid 6505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6500] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6507] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6506] <... mount resumed>) = 0 [pid 6505] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6500] <... futex resumed>) = 0 [pid 5069] close(4 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] newfstatat(3, "", [pid 6507] <... openat resumed>) = 3 [pid 6506] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6500] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6507] chdir("./bus" [pid 6506] <... openat resumed>) = 3 [pid 5069] rmdir("./78/bus" [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 6507] <... chdir resumed>) = 0 [pid 6506] chdir("./bus" [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6507] ioctl(4, LOOP_CLR_FD [pid 6506] <... chdir resumed>) = 0 [pid 5069] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5067] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6507] <... ioctl resumed>) = 0 [pid 6506] ioctl(4, LOOP_CLR_FD [pid 5068] <... close resumed>) = 0 [pid 6507] close(4 [pid 6506] <... ioctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 145.983432][ T6507] loop5: detected capacity change from 0 to 1024 [pid 6506] close(4) = 0 [pid 6506] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6502] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] creat("./bus", 000 [pid 6502] <... futex resumed>) = 0 [pid 6506] <... creat resumed>) = 4 [pid 6502] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6508 attached [pid 6507] <... close resumed>) = 0 [pid 6506] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(AT_FDCWD, "./78/binderfs", [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6508 [pid 6508] set_robust_list(0x555555fbc6a0, 24 [pid 6506] <... futex resumed>) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6502] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... set_robust_list resumed>) = 0 [pid 6502] <... futex resumed>) = 0 [pid 6508] chdir("./80" [pid 6506] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6502] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6508] <... chdir resumed>) = 0 [pid 6508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6508] setpgid(0, 0 [pid 6507] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6508] <... setpgid resumed>) = 0 [pid 6507] <... futex resumed>) = 1 [pid 5069] unlink("./78/binderfs" [pid 6501] <... futex resumed>) = 0 [pid 6508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6507] creat("./bus", 000 [pid 6501] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... unlink resumed>) = 0 [pid 6508] <... openat resumed>) = 3 [pid 6501] <... futex resumed>) = 0 [pid 5069] getdents64(3, [pid 6508] write(3, "1000", 4 [pid 6501] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6507] <... creat resumed>) = 4 [pid 6508] <... write resumed>) = 4 [pid 6507] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 6508] close(3 [pid 6507] <... futex resumed>) = 1 [pid 6501] <... futex resumed>) = 0 [pid 6500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... close resumed>) = 0 [pid 6508] <... close resumed>) = 0 [pid 6507] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6501] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./78" [pid 5067] <... umount2 resumed>) = 0 [ 146.025528][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 146.026836][ T6505] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.040209][ T6505] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.048248][ T6505] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6508] symlink("/dev/binderfs", "./binderfs" [pid 6507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6501] <... futex resumed>) = 0 [pid 6500] <... futex resumed>) = 0 [pid 6508] <... symlink resumed>) = 0 [pid 6507] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6501] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6508] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] mkdir("./79", 0777 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6500] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6508] <... futex resumed>) = 0 [pid 6508] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6500] <... mprotect resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./77/bus", [pid 5069] <... mkdir resumed>) = 0 [pid 6508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6500] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6500] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6508] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6508] <... mprotect resumed>) = 0 [pid 6508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6509]}, 88) = 6509 [pid 6508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6508] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6502] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6502] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6510 attached ./strace-static-x86_64: Process 6509 attached ) = 0x7efd7cefb000 [ 146.079831][ T6506] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.092164][ T6505] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.096407][ T6507] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.121044][ T6507] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6510] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6509] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6502] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6511]}, 88) = 6511 [pid 6502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6502] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6502] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... clone3 resumed> => {parent_tid=[6510]}, 88) = 6510 ./strace-static-x86_64: Process 6511 attached [pid 6510] <... rseq resumed>) = 0 [pid 6509] <... rseq resumed>) = 0 [pid 6501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6500] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... openat resumed>) = 4 [pid 6511] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6510] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6509] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6501] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 5067] newfstatat(4, "", [pid 6511] <... rseq resumed>) = 0 [pid 6510] <... set_robust_list resumed>) = 0 [pid 6509] <... set_robust_list resumed>) = 0 [pid 6501] <... futex resumed>) = 0 [pid 6511] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6509] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6511] <... set_robust_list resumed>) = 0 [pid 6510] rt_sigprocmask(SIG_SETMASK, [], [pid 6509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... close resumed>) = 0 [pid 6511] rt_sigprocmask(SIG_SETMASK, [], [pid 6510] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6511] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6510] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6509] memfd_create("syzkaller", 0 [pid 6501] <... mmap resumed>) = 0x7efd7cefb000 [pid 6500] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(4, [pid 6511] creat("./file1", 000 [pid 6500] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6500] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6512 attached [pid 6510] <... futex resumed>) = 0 [pid 6509] <... memfd_create resumed>) = 3 [pid 6501] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6510] creat("./file1", 000 [pid 6509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6501] <... mprotect resumed>) = 0 [pid 6512] set_robust_list(0x555555fbc6a0, 24 [pid 6509] <... mmap resumed>) = 0x7efd74b1c000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6512 [pid 5067] getdents64(4, [pid 6501] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6512] <... set_robust_list resumed>) = 0 [pid 6509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6501] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] close(4 [pid 6512] chdir("./79" [pid 6501] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... close resumed>) = 0 [pid 6512] <... chdir resumed>) = 0 [pid 5067] rmdir("./77/bus" [pid 6512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 146.121830][ T6506] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.128727][ T6507] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.154732][ T6505] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.163439][ T6507] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.168995][ T6505] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6513 attached [pid 6501] <... clone3 resumed> => {parent_tid=[6513]}, 88) = 6513 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6501] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(AT_FDCWD, "./77/binderfs", [pid 6512] setpgid(0, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6501] <... futex resumed>) = 0 [pid 5067] unlink("./77/binderfs" [pid 6501] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6512] <... setpgid resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6513] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6513] <... set_robust_list resumed>) = 0 [pid 6513] rt_sigprocmask(SIG_SETMASK, [], [pid 6512] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 6513] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6512] <... write resumed>) = 4 [pid 6513] creat("./file1", 000 [pid 6512] close(3 [pid 5067] close(3 [pid 6512] <... close resumed>) = 0 [pid 6512] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 6512] <... symlink resumed>) = 0 [pid 6505] <... write resumed>) = 57344 [pid 6500] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6512] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... creat resumed>) = 5 [pid 6505] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] rmdir("./77" [pid 6512] <... futex resumed>) = 0 [pid 6505] <... futex resumed>) = 0 [pid 6512] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6505] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] <... rmdir resumed>) = 0 [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6510] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] exit_group(0 [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6510] <... futex resumed>) = ? [pid 6505] <... futex resumed>) = ? [pid 6500] <... exit_group resumed>) = ? [pid 6512] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6510] +++ exited with 0 +++ [pid 6505] +++ exited with 0 +++ [pid 6500] +++ exited with 0 +++ [pid 5067] mkdir("./78", 0777 [pid 6512] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6509] <... write resumed>) = 524288 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6500, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6512] <... mprotect resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... mkdir resumed>) = 0 [pid 6512] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6514]}, 88) = 6514 [pid 6512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6512] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6512] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6514 attached [pid 6514] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6514] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6514] memfd_create("syzkaller", 0) = 3 [pid 6514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5066] <... restart_syscall resumed>) = 0 [pid 6514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 146.189151][ T6507] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.191216][ T6506] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.226542][ T6506] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6509] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5066] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6511] <... creat resumed>) = 5 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6511] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 3 [pid 6511] <... futex resumed>) = 0 [pid 6509] <... openat resumed>) = 4 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] newfstatat(3, "", [pid 6511] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] close(3 [pid 6509] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(3, ./strace-static-x86_64: Process 6515 attached [pid 6501] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6515 [pid 6515] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 5066] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6515] chdir("./78") = 0 [pid 6515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6509] <... ioctl resumed>) = 0 [pid 6515] setpgid(0, 0 [pid 6514] <... write resumed>) = 524288 [pid 6513] <... creat resumed>) = 5 [pid 6509] close(3 [pid 6515] <... setpgid resumed>) = 0 [pid 6513] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... close resumed>) = 0 [pid 6513] <... futex resumed>) = 0 [pid 6509] mkdir("./bus", 0777 [pid 6515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6513] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6507] <... write resumed>) = 57344 [pid 6507] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... mkdir resumed>) = 0 [pid 6501] exit_group(0 [pid 6507] <... futex resumed>) = ? [pid 6501] <... exit_group resumed>) = ? [pid 6513] <... futex resumed>) = ? [pid 6513] +++ exited with 0 +++ [pid 6507] +++ exited with 0 +++ [pid 6514] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6514] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 146.226798][ T6507] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.259098][ T6509] loop3: detected capacity change from 0 to 1024 [ 146.259281][ T6506] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6514] ioctl(4, LOOP_SET_FD, 3 [pid 6515] <... openat resumed>) = 3 [pid 6509] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6501] +++ exited with 0 +++ [pid 6515] write(3, "1000", 4 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6501, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6515] <... write resumed>) = 4 [pid 6515] close(3) = 0 [pid 6515] symlink("/dev/binderfs", "./binderfs" [pid 5070] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6515] <... symlink resumed>) = 0 [pid 6515] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 6515] <... futex resumed>) = 0 [pid 5070] newfstatat(3, "", [pid 6515] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, [pid 6515] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6514] <... ioctl resumed>) = 0 [pid 6514] close(3) = 0 [pid 6514] mkdir("./bus", 0777 [pid 6515] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6514] <... mkdir resumed>) = 0 [pid 5066] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6515] <... mprotect resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./79/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6514] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6515] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6509] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6515] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6509] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... openat resumed>) = 4 [pid 6509] <... openat resumed>) = 3 [pid 5066] newfstatat(4, "", [pid 6515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6509] chdir("./bus" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6509] <... chdir resumed>) = 0 [pid 5066] getdents64(4, [pid 6515] <... clone3 resumed> => {parent_tid=[6516]}, 88) = 6516 [pid 6515] rt_sigprocmask(SIG_SETMASK, [], [pid 6509] ioctl(4, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] getdents64(4, [pid 6515] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... ioctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6515] <... futex resumed>) = 0 [pid 5066] close(4 [pid 6509] close(4 [pid 6515] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6509] <... close resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6509] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] rmdir("./79/bus" [pid 6509] <... futex resumed>) = 1 [pid 6508] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6516 attached [pid 6508] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./79/binderfs", [pid 6516] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6508] <... futex resumed>) = 0 [pid 6506] <... write resumed>) = 57344 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 146.302803][ T47] hfsplus: b-tree write err: -5, ino 4 [ 146.305476][ T6514] loop4: detected capacity change from 0 to 1024 [ 146.320042][ T6506] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.338526][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 5066] unlink("./79/binderfs" [pid 6516] <... rseq resumed>) = 0 [pid 6509] creat("./bus", 000 [pid 6508] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... unlink resumed>) = 0 [pid 6516] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6506] <... futex resumed>) = 0 [pid 6502] exit_group(0 [pid 5066] getdents64(3, [pid 6516] <... set_robust_list resumed>) = 0 [pid 6511] <... futex resumed>) = ? [pid 6509] <... creat resumed>) = 4 [pid 6502] <... exit_group resumed>) = ? [pid 6516] rt_sigprocmask(SIG_SETMASK, [], [pid 6511] +++ exited with 0 +++ [pid 6509] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6516] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6509] <... futex resumed>) = 1 [pid 6508] <... futex resumed>) = 0 [pid 6502] +++ exited with 0 +++ [pid 5066] close(3 [pid 6516] memfd_create("syzkaller", 0 [pid 6509] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6508] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] <... close resumed>) = 0 [pid 6509] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] rmdir("./79" [pid 6516] <... memfd_create resumed>) = 3 [pid 6508] <... futex resumed>) = 0 [pid 6516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5070] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6516] <... mmap resumed>) = 0x7efd74b1c000 [pid 6508] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6502, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] newfstatat(AT_FDCWD, "./79/bus", [pid 5066] mkdir("./80", 0777 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6514] <... mount resumed>) = 0 [pid 5070] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5070] <... openat resumed>) = 4 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6514] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] newfstatat(4, "", [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6514] <... openat resumed>) = 3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 5065] getdents64(3, [pid 6514] chdir("./bus" [pid 5070] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 6514] <... chdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6517 [ 146.405378][ T6509] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.441042][ T6509] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6516] <... write resumed>) = 524288 [pid 6508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6508] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6508] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6516] munmap(0x7efd74b1c000, 138412032 [pid 6508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6516] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6518 attached [pid 6508] <... clone3 resumed> => {parent_tid=[6518]}, 88) = 6518 [pid 6518] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6516] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6508] rt_sigprocmask(SIG_SETMASK, [], [pid 6518] <... rseq resumed>) = 0 [pid 6516] <... openat resumed>) = 4 [pid 6508] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6508] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6516] ioctl(4, LOOP_SET_FD, 3 [pid 6508] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6517 attached [pid 6517] set_robust_list(0x555555fbc6a0, 24 [pid 6514] ioctl(4, LOOP_CLR_FD [pid 6508] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] getdents64(4, [pid 6517] <... set_robust_list resumed>) = 0 [pid 6514] <... ioctl resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6518] <... set_robust_list resumed>) = 0 [pid 6517] chdir("./80" [pid 6514] close(4 [pid 5070] close(4 [pid 6518] rt_sigprocmask(SIG_SETMASK, [], [pid 6514] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6518] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6518] creat("./file1", 000 [pid 5070] rmdir("./79/bus") = 0 [pid 5070] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6514] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./79/binderfs", [pid 6514] <... futex resumed>) = 1 [pid 6512] <... futex resumed>) = 0 [pid 6512] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6514] creat("./bus", 000 [pid 6512] <... futex resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6512] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6518] <... creat resumed>) = 5 [pid 6516] <... ioctl resumed>) = 0 [pid 6518] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] close(3 [pid 6514] <... creat resumed>) = 4 [pid 6514] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] unlink("./79/binderfs" [pid 6514] <... futex resumed>) = 1 [pid 6512] <... futex resumed>) = 0 [pid 6512] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6518] <... futex resumed>) = 1 [pid 6516] <... close resumed>) = 0 [pid 6512] <... futex resumed>) = 0 [pid 6508] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6516] mkdir("./bus", 0777 [pid 6514] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6512] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6517] <... chdir resumed>) = 0 [pid 5070] getdents64(3, [pid 6518] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6516] <... mkdir resumed>) = 0 [pid 6516] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 146.451460][ T6509] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.458962][ T6509] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.467070][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 146.473266][ T6516] loop2: detected capacity change from 0 to 1024 [pid 5065] newfstatat(AT_FDCWD, "./78/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6517] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 6517] <... prctl resumed>) = 0 [pid 5070] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... close resumed>) = 0 [pid 6517] setpgid(0, 0 [pid 5070] rmdir("./79" [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 6517] <... setpgid resumed>) = 0 [pid 6516] <... mount resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] rmdir("./78/bus" [pid 6517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6516] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] mkdir("./80", 0777 [pid 6516] <... openat resumed>) = 3 [ 146.511828][ T6509] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.524386][ T6514] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6517] <... openat resumed>) = 3 [pid 6516] chdir("./bus" [pid 5070] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6516] <... chdir resumed>) = 0 [pid 5065] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6516] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6516] close(4 [pid 5065] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6516] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5065] unlink("./78/binderfs" [pid 6517] write(3, "1000", 4) = 4 [pid 6516] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... write resumed>) = 57344 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5065] <... unlink resumed>) = 0 [pid 6517] close(3) = 0 [pid 6516] <... futex resumed>) = 1 [pid 6515] <... futex resumed>) = 0 [pid 6509] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(3, [pid 6517] symlink("/dev/binderfs", "./binderfs" [pid 6516] creat("./bus", 000 [pid 6515] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = 0 [pid 6508] exit_group(0 [pid 6518] <... futex resumed>) = ? [pid 6516] <... creat resumed>) = 4 [pid 6508] <... exit_group resumed>) = ? [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6518] +++ exited with 0 +++ [pid 6517] <... symlink resumed>) = 0 [pid 6515] <... futex resumed>) = 0 [pid 6512] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] close(3 [pid 5065] close(3 [pid 6517] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6516] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 6517] <... futex resumed>) = 0 [pid 6516] <... futex resumed>) = 0 [pid 6515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6512] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5065] rmdir("./78" [pid 6517] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6516] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6515] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6509] +++ exited with 0 +++ [pid 6508] +++ exited with 0 +++ [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... rmdir resumed>) = 0 [pid 6516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6515] <... futex resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6508, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5065] mkdir("./79", 0777 [pid 6516] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6515] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... mkdir resumed>) = 0 [pid 5068] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6512] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] newfstatat(3, "", [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6512] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6517] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6512] <... mprotect resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6512] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] getdents64(3, ./strace-static-x86_64: Process 6519 attached [pid 6512] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6519] set_robust_list(0x555555fbc6a0, 24 [pid 6517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6519 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6520 attached [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6520] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6519] <... set_robust_list resumed>) = 0 [pid 5065] close(3 [pid 6519] chdir("./80" [pid 5065] <... close resumed>) = 0 [ 146.553071][ T6509] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.576905][ T6514] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6520] <... rseq resumed>) = 0 [pid 6519] <... chdir resumed>) = 0 [pid 6517] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6512] <... clone3 resumed> => {parent_tid=[6520]}, 88) = 6520 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6520] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6517] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6512] rt_sigprocmask(SIG_SETMASK, [], [pid 6517] <... mprotect resumed>) = 0 [pid 6520] <... set_robust_list resumed>) = 0 [pid 6519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6517] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6512] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] <... prctl resumed>) = 0 [pid 6519] setpgid(0, 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6521 [pid 6519] <... setpgid resumed>) = 0 [pid 6519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6519] write(3, "1000", 4 [pid 6520] rt_sigprocmask(SIG_SETMASK, [], [pid 6519] <... write resumed>) = 4 [pid 6517] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6512] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6520] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6512] <... futex resumed>) = 0 [pid 6517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6522 attached ./strace-static-x86_64: Process 6521 attached [pid 6520] creat("./file1", 000 [pid 6519] close(3 [pid 6515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6512] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6522] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6517] <... clone3 resumed> => {parent_tid=[6522]}, 88) = 6522 [pid 6522] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6521] set_robust_list(0x555555fbc6a0, 24 [pid 6519] <... close resumed>) = 0 [pid 6517] rt_sigprocmask(SIG_SETMASK, [], [pid 6515] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] rt_sigprocmask(SIG_SETMASK, [], [pid 6521] <... set_robust_list resumed>) = 0 [pid 6519] symlink("/dev/binderfs", "./binderfs" [pid 6517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6515] <... futex resumed>) = 0 [pid 6522] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6521] chdir("./79" [pid 6517] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... chdir resumed>) = 0 [pid 6515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6519] <... symlink resumed>) = 0 [pid 6522] memfd_create("syzkaller", 0 [pid 6521] <... prctl resumed>) = 0 [pid 6519] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = 0 [pid 6515] <... mmap resumed>) = 0x7efd7cefb000 [pid 6517] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6522] <... memfd_create resumed>) = 3 [pid 6522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6519] <... futex resumed>) = 0 [pid 6515] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [ 146.610309][ T6516] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.620445][ T6514] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.639229][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 146.645479][ T6514] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6521] setpgid(0, 0 [pid 6522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6521] <... setpgid resumed>) = 0 [pid 6520] <... creat resumed>) = 5 [pid 6519] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6515] <... mprotect resumed>) = 0 [pid 6520] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6512] <... futex resumed>) = 0 [pid 6521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6519] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6515] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6515] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6521] <... openat resumed>) = 3 [pid 6519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6521] write(3, "1000", 4 [pid 6519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6523 attached [pid 6521] <... write resumed>) = 4 [pid 6519] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6515] <... clone3 resumed> => {parent_tid=[6523]}, 88) = 6523 [pid 6523] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6521] close(3 [pid 6519] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6515] rt_sigprocmask(SIG_SETMASK, [], [pid 6523] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6520] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6523] <... set_robust_list resumed>) = 0 [pid 6521] <... close resumed>) = 0 [pid 6519] <... mprotect resumed>) = 0 [pid 6515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6521] symlink("/dev/binderfs", "./binderfs" [pid 6519] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6515] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] creat("./file1", 000 [pid 6521] <... symlink resumed>) = 0 [pid 6519] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6515] <... futex resumed>) = 0 [pid 6522] <... write resumed>) = 524288 [pid 6521] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6521] <... futex resumed>) = 0 [pid 6515] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6521] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6519] <... clone3 resumed> => {parent_tid=[6524]}, 88) = 6524 [pid 6521] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6519] rt_sigprocmask(SIG_SETMASK, [], [pid 6521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6519] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6519] <... futex resumed>) = 0 [pid 6521] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6519] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6521] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] <... umount2 resumed>) = 0 [pid 6521] <... clone3 resumed> => {parent_tid=[6525]}, 88) = 6525 [pid 6521] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6525 attached NULL, 8) = 0 [pid 6525] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6521] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] <... rseq resumed>) = 0 [pid 6521] <... futex resumed>) = 0 [pid 6525] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6521] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6525] <... set_robust_list resumed>) = 0 [pid 6525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6525] memfd_create("syzkaller", 0) = 3 [pid 5068] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6524 attached [pid 6525] <... mmap resumed>) = 0x7efd74b1c000 [pid 6522] munmap(0x7efd74b1c000, 138412032 [pid 5068] newfstatat(AT_FDCWD, "./80/bus", [pid 6525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6524] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6522] <... munmap resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6524] <... rseq resumed>) = 0 [pid 6522] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 146.673617][ T6516] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.684347][ T6514] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.705685][ T6514] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.714603][ T6516] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6524] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6522] <... openat resumed>) = 4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6524] <... set_robust_list resumed>) = 0 [pid 6523] <... creat resumed>) = 5 [pid 6522] ioctl(4, LOOP_SET_FD, 3 [pid 6514] <... write resumed>) = 57344 [pid 5068] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6524] rt_sigprocmask(SIG_SETMASK, [], [pid 6523] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6515] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... openat resumed>) = 4 [pid 5068] newfstatat(4, "", [pid 6523] <... futex resumed>) = 0 [pid 6524] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6514] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6523] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6525] <... write resumed>) = 524288 [pid 6524] memfd_create("syzkaller", 0 [pid 6514] <... futex resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6514] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6512] exit_group(0 [pid 6524] <... memfd_create resumed>) = 3 [pid 6512] <... exit_group resumed>) = ? [pid 6514] <... futex resumed>) = ? [pid 6524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6520] <... futex resumed>) = ? [pid 6524] <... mmap resumed>) = 0x7efd74b1c000 [pid 6520] +++ exited with 0 +++ [pid 6514] +++ exited with 0 +++ [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6525] munmap(0x7efd74b1c000, 138412032 [pid 6524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6522] <... ioctl resumed>) = 0 [pid 6512] +++ exited with 0 +++ [pid 5068] getdents64(4, [pid 6525] <... munmap resumed>) = 0 [pid 6524] <... write resumed>) = 524288 [pid 6522] close(3) = 0 [pid 6522] mkdir("./bus", 0777) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6512, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6522] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [ 146.751976][ T6516] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.762056][ T6522] loop1: detected capacity change from 0 to 1024 [ 146.790619][ T6516] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6525] ioctl(4, LOOP_SET_FD, 3 [pid 6524] munmap(0x7efd74b1c000, 138412032 [pid 5068] close(4 [pid 6522] <... mount resumed>) = 0 [pid 6524] <... munmap resumed>) = 0 [pid 6524] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6524] ioctl(4, LOOP_SET_FD, 3 [pid 6525] <... ioctl resumed>) = 0 [pid 6522] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6516] <... write resumed>) = 57344 [pid 5068] <... close resumed>) = 0 [pid 6525] close(3 [pid 6522] <... openat resumed>) = 3 [pid 6516] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./80/bus" [pid 6525] <... close resumed>) = 0 [pid 6524] <... ioctl resumed>) = 0 [pid 6522] chdir("./bus" [pid 6516] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6525] mkdir("./bus", 0777 [pid 6524] close(3 [pid 6522] <... chdir resumed>) = 0 [pid 6515] exit_group(0 [pid 5069] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6524] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6524] mkdir("./bus", 0777 [pid 6523] <... futex resumed>) = ? [pid 6515] <... exit_group resumed>) = ? [pid 6524] <... mkdir resumed>) = 0 [pid 6523] +++ exited with 0 +++ [pid 6524] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6525] <... mkdir resumed>) = 0 [pid 6522] ioctl(4, LOOP_CLR_FD [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5069] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6525] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6524] <... mount resumed>) = 0 [pid 6522] <... ioctl resumed>) = 0 [pid 6516] +++ exited with 0 +++ [pid 6515] +++ exited with 0 +++ [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6524] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... openat resumed>) = 3 [pid 5068] unlink("./80/binderfs" [pid 6525] <... mount resumed>) = 0 [pid 6522] close(4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6515, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6525] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6524] <... openat resumed>) = 3 [pid 5069] newfstatat(3, "", [pid 5068] <... unlink resumed>) = 0 [pid 6525] <... openat resumed>) = 3 [pid 6525] chdir("./bus" [pid 6524] chdir("./bus" [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6525] <... chdir resumed>) = 0 [pid 6524] <... chdir resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] getdents64(3, [pid 6525] ioctl(4, LOOP_CLR_FD [pid 6524] ioctl(4, LOOP_CLR_FD [pid 6522] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6525] <... ioctl resumed>) = 0 [pid 6524] <... ioctl resumed>) = 0 [pid 6522] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6525] close(4 [pid 6524] close(4 [pid 6522] <... futex resumed>) = 1 [pid 6517] <... futex resumed>) = 0 [ 146.802673][ T6525] loop0: detected capacity change from 0 to 1024 [ 146.808528][ T6516] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.814956][ T6524] loop5: detected capacity change from 0 to 1024 [pid 5069] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5067] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6525] <... close resumed>) = 0 [pid 6524] <... close resumed>) = 0 [pid 6522] creat("./bus", 000 [pid 6517] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6525] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] <... creat resumed>) = 4 [pid 6517] <... futex resumed>) = 0 [pid 5068] rmdir("./80" [pid 5067] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6524] <... futex resumed>) = 1 [pid 6519] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6524] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6519] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] newfstatat(3, "", [pid 6524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6519] <... futex resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6524] creat("./bus", 000 [pid 6519] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] getdents64(3, [pid 6525] <... futex resumed>) = 1 [pid 6524] <... creat resumed>) = 4 [pid 6522] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] <... futex resumed>) = 0 [pid 6517] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] mkdir("./81", 0777 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6525] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6521] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6517] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6522] <... futex resumed>) = 0 [pid 6521] <... futex resumed>) = 0 [pid 6517] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mkdir resumed>) = 0 [pid 6524] <... futex resumed>) = 1 [pid 6519] <... futex resumed>) = 0 [pid 6519] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6519] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6519] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 6521] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6525] creat("./bus", 000 [pid 6522] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6517] <... futex resumed>) = 0 [pid 6525] <... creat resumed>) = 4 [pid 6517] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6526 [pid 6525] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6526 attached ) = 1 [pid 6521] <... futex resumed>) = 0 [pid 6526] set_robust_list(0x555555fbc6a0, 24 [pid 6525] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6521] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... set_robust_list resumed>) = 0 [pid 6526] chdir("./81" [pid 6521] <... futex resumed>) = 0 [pid 6526] <... chdir resumed>) = 0 [ 146.874290][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 146.886504][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 146.897585][ T6524] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.899261][ T6522] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.914253][ T6524] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6521] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... umount2 resumed>) = 0 [pid 6519] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6519] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6527]}, 88) = 6527 [pid 6519] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6519] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6519] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./79/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6526] <... prctl resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./79/bus") = 0 [pid 5069] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./79/binderfs"./strace-static-x86_64: Process 6527 attached [pid 6526] setpgid(0, 0 [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [ 146.935560][ T6525] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.943585][ T6522] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.950348][ T6524] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6527] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6526] <... setpgid resumed>) = 0 [pid 6521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 5067] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./79") = 0 [pid 5069] mkdir("./80", 0777) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6527] <... rseq resumed>) = 0 [pid 6526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6521] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6519] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6517] <... futex resumed>) = 0 [pid 6527] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6521] <... futex resumed>) = 0 [pid 6517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6526] <... openat resumed>) = 3 [pid 6527] <... set_robust_list resumed>) = 0 [pid 6526] write(3, "1000", 4 [pid 6521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6517] <... mmap resumed>) = 0x7efd7cefb000 [pid 6527] rt_sigprocmask(SIG_SETMASK, [], [pid 6526] <... write resumed>) = 4 [pid 6521] <... mmap resumed>) = 0x7efd7cefb000 [pid 6517] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6526] close(3 [pid 6521] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6517] <... mprotect resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6527] creat("./file1", 000 [pid 6526] <... close resumed>) = 0 [pid 6521] <... mprotect resumed>) = 0 [pid 6517] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6526] symlink("/dev/binderfs", "./binderfs" [pid 6521] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6517] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] newfstatat(AT_FDCWD, "./78/bus", [pid 5069] close(3) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6528 [pid 6521] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6528 attached [pid 6526] <... symlink resumed>) = 0 [pid 6521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6528] set_robust_list(0x555555fbc6a0, 24./strace-static-x86_64: Process 6529 attached [pid 6527] <... creat resumed>) = 5 [pid 6526] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [ 146.976989][ T6525] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.982778][ T6524] hfsplus: request for non-existent node 16715520 in B*Tree [ 146.984876][ T6522] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.011769][ T6525] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6528] <... set_robust_list resumed>) = 0 [pid 6528] chdir("./80" [pid 6517] <... clone3 resumed> => {parent_tid=[6530]}, 88) = 6530 [pid 6528] <... chdir resumed>) = 0 [pid 6517] rt_sigprocmask(SIG_SETMASK, [], [pid 6528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6521] <... clone3 resumed> => {parent_tid=[6529]}, 88) = 6529 [pid 6517] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6530 attached [pid 6529] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6528] <... prctl resumed>) = 0 [pid 6527] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] <... futex resumed>) = 0 [pid 6521] rt_sigprocmask(SIG_SETMASK, [], [pid 6517] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6529] <... rseq resumed>) = 0 [pid 6527] <... futex resumed>) = 0 [pid 6526] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6521] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6527] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6526] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6521] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 4 [pid 6529] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6521] <... futex resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 6529] <... set_robust_list resumed>) = 0 [pid 6526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6521] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6529] rt_sigprocmask(SIG_SETMASK, [], [pid 6526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6529] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6529] creat("./file1", 000 [pid 6528] setpgid(0, 0 [pid 6526] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6517] <... futex resumed>) = 0 [pid 5067] getdents64(4, [pid 6530] <... rseq resumed>) = 0 [pid 6529] <... creat resumed>) = 5 [pid 6528] <... setpgid resumed>) = 0 [pid 6526] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6517] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6530] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6529] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6526] <... mprotect resumed>) = 0 [pid 6530] <... set_robust_list resumed>) = 0 [pid 6528] <... openat resumed>) = 3 [pid 5067] getdents64(4, [pid 6530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6530] creat("./file1", 000 [pid 6528] write(3, "1000", 4) = 4 [pid 6528] close(3) = 0 [pid 6526] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6521] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6529] <... futex resumed>) = 1 [pid 6528] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6528] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6528] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6529] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6528] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6526] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] close(4 [pid 6528] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6532 attached [ 147.020275][ T6522] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.028561][ T6525] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.037494][ T6524] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.052688][ T6522] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.061460][ T6524] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.062143][ T6525] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] rmdir("./78/bus"./strace-static-x86_64: Process 6531 attached [pid 6528] <... clone3 resumed> => {parent_tid=[6531]}, 88) = 6531 [pid 6531] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6528] rt_sigprocmask(SIG_SETMASK, [], [pid 6531] <... rseq resumed>) = 0 [pid 6528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6526] <... clone3 resumed> => {parent_tid=[6532]}, 88) = 6532 [pid 5067] <... rmdir resumed>) = 0 [pid 6532] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6531] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6528] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] rt_sigprocmask(SIG_SETMASK, [], [pid 6532] <... rseq resumed>) = 0 [pid 6531] <... set_robust_list resumed>) = 0 [pid 6530] <... creat resumed>) = 5 [pid 6528] <... futex resumed>) = 0 [pid 6526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6524] <... write resumed>) = 57344 [pid 6522] <... write resumed>) = 57344 [pid 5067] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6532] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6531] rt_sigprocmask(SIG_SETMASK, [], [pid 6530] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6526] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6524] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6522] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6531] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6530] <... futex resumed>) = 0 [pid 6519] exit_group(0 [pid 6517] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6531] memfd_create("syzkaller", 0 [pid 6530] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6524] <... futex resumed>) = ? [pid 6519] <... exit_group resumed>) = ? [pid 6517] exit_group(0 [pid 6530] <... futex resumed>) = ? [pid 6524] +++ exited with 0 +++ [pid 6517] <... exit_group resumed>) = ? [pid 6532] <... set_robust_list resumed>) = 0 [pid 6530] +++ exited with 0 +++ [pid 6527] <... futex resumed>) = ? [pid 6526] <... futex resumed>) = 0 [pid 6522] <... futex resumed>) = ? [pid 5067] newfstatat(AT_FDCWD, "./78/binderfs", [pid 6531] <... memfd_create resumed>) = 3 [pid 6531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6527] +++ exited with 0 +++ [pid 6519] +++ exited with 0 +++ [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6532] rt_sigprocmask(SIG_SETMASK, [], [pid 6531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6526] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6525] <... write resumed>) = 57344 [pid 6522] +++ exited with 0 +++ [pid 6517] +++ exited with 0 +++ [pid 5067] unlink("./78/binderfs" [pid 6532] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6525] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6521] exit_group(0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6519, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... unlink resumed>) = 0 [pid 5070] <... restart_syscall resumed>) = 0 [pid 6532] memfd_create("syzkaller", 0 [pid 6529] <... futex resumed>) = ? [pid 6525] <... futex resumed>) = ? [pid 6521] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 6532] <... memfd_create resumed>) = 3 [pid 6529] +++ exited with 0 +++ [pid 6532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6517, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5070] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... restart_syscall resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6525] +++ exited with 0 +++ [pid 6521] +++ exited with 0 +++ [pid 6532] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] newfstatat(3, "", [pid 5067] close(3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6521, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5070] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 6532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... close resumed>) = 0 [pid 5070] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./78" [pid 5066] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... restart_syscall resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 5067] mkdir("./79", 0777 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 147.081418][ T6522] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.101580][ T6525] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] getdents64(3, [pid 6531] <... write resumed>) = 524288 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6533 ./strace-static-x86_64: Process 6533 attached [pid 6531] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6531] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6531] ioctl(4, LOOP_SET_FD, 3 [pid 6533] set_robust_list(0x555555fbc6a0, 24 [pid 6532] <... write resumed>) = 524288 [pid 6533] <... set_robust_list resumed>) = 0 [pid 6532] munmap(0x7efd74b1c000, 138412032 [pid 6533] chdir("./79" [pid 6532] <... munmap resumed>) = 0 [ 147.145076][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 147.162525][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 147.181094][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6533] <... chdir resumed>) = 0 [pid 6532] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] <... umount2 resumed>) = 0 [pid 6533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6533] setpgid(0, 0 [pid 6532] <... openat resumed>) = 4 [pid 5070] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] <... setpgid resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6532] ioctl(4, LOOP_SET_FD, 3 [pid 5070] newfstatat(AT_FDCWD, "./80/bus", [pid 6533] <... openat resumed>) = 3 [pid 6532] <... ioctl resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5070] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] write(3, "1000", 4) = 4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6531] <... ioctl resumed>) = 0 [pid 6531] close(3) = 0 [pid 6531] mkdir("./bus", 0777) = 0 [pid 6533] close(3 [pid 6531] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6533] <... close resumed>) = 0 [pid 6532] close(3 [pid 5070] <... openat resumed>) = 4 [pid 6533] symlink("/dev/binderfs", "./binderfs" [pid 6532] <... close resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 6532] mkdir("./bus", 0777 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6533] <... symlink resumed>) = 0 [pid 6532] <... mkdir resumed>) = 0 [pid 6531] <... mount resumed>) = 0 [pid 5070] getdents64(4, [pid 6531] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 6531] <... openat resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [ 147.190924][ T6531] loop4: detected capacity change from 0 to 1024 [ 147.212605][ T6532] loop3: detected capacity change from 0 to 1024 [pid 6531] chdir("./bus" [pid 5066] newfstatat(AT_FDCWD, "./80/bus", [pid 6531] <... chdir resumed>) = 0 [pid 6531] ioctl(4, LOOP_CLR_FD) = 0 [pid 6531] close(4 [pid 6533] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 6532] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6531] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6531] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6528] <... futex resumed>) = 0 [pid 5066] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6531] creat("./bus", 000 [pid 6528] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6531] <... creat resumed>) = 4 [pid 6528] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6531] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(4 [pid 5066] <... openat resumed>) = 4 [pid 6533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6531] <... futex resumed>) = 0 [pid 6528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... close resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 5065] newfstatat(AT_FDCWD, "./79/bus", [pid 6533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6531] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6528] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./80/bus" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6528] <... futex resumed>) = 0 [pid 5066] getdents64(4, [pid 5065] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6528] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] <... mprotect resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6531] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] getdents64(4, [pid 5065] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6533] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6531] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6532] <... mount resumed>) = 0 [pid 5070] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5065] newfstatat(4, "", ./strace-static-x86_64: Process 6534 attached [pid 6533] <... clone3 resumed> => {parent_tid=[6534]}, 88) = 6534 [pid 6534] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6533] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6532] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6534] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6532] <... openat resumed>) = 3 [pid 6532] chdir("./bus" [pid 6534] <... set_robust_list resumed>) = 0 [pid 6533] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6533] <... futex resumed>) = 0 [pid 6532] ioctl(4, LOOP_CLR_FD [pid 6534] rt_sigprocmask(SIG_SETMASK, [], [pid 6533] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6532] <... ioctl resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./80/binderfs" [pid 6532] close(4 [pid 6534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] rmdir("./80/bus" [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6534] memfd_create("syzkaller", 0 [pid 6532] <... close resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(4, [pid 6534] <... memfd_create resumed>) = 3 [pid 6532] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 6534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6526] <... futex resumed>) = 0 [pid 5066] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6534] <... mmap resumed>) = 0x7efd74b1c000 [pid 6532] <... futex resumed>) = 1 [pid 6526] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(4 [pid 6534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5066] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5065] <... close resumed>) = 0 [pid 6532] creat("./bus", 000 [pid 6526] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6526] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... close resumed>) = 0 [pid 5070] rmdir("./80" [pid 6532] <... creat resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] rmdir("./79/bus" [pid 5070] <... rmdir resumed>) = 0 [pid 5066] unlink("./80/binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5065] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6532] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6526] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(AT_FDCWD, "./79/binderfs", [pid 6532] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6526] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6526] <... futex resumed>) = 0 [pid 5066] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6528] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6526] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... close resumed>) = 0 [pid 5065] unlink("./79/binderfs" [pid 6528] <... futex resumed>) = 0 [pid 5066] rmdir("./80" [pid 6528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... unlink resumed>) = 0 [pid 6528] <... mmap resumed>) = 0x7efd7cefb000 [ 147.297301][ T6531] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] mkdir("./81", 0777 [pid 5066] <... rmdir resumed>) = 0 [pid 6528] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, [pid 6528] <... mprotect resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6528] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6528] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... close resumed>) = 0 [pid 6528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] mkdir("./81", 0777 [pid 5065] rmdir("./79" [pid 6534] <... write resumed>) = 524288 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6528] <... clone3 resumed> => {parent_tid=[6535]}, 88) = 6535 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] mkdir("./80", 0777./strace-static-x86_64: Process 6535 attached [pid 6534] munmap(0x7efd74b1c000, 138412032 [pid 6528] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 6535] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6534] <... munmap resumed>) = 0 [pid 6528] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6535] <... rseq resumed>) = 0 [pid 6528] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... openat resumed>) = 3 [pid 6535] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6528] <... futex resumed>) = 0 [pid 5066] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6535] <... set_robust_list resumed>) = 0 [pid 6534] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6528] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6535] rt_sigprocmask(SIG_SETMASK, [], [pid 6534] <... openat resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] close(3 [pid 6535] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6535] creat("./file1", 000 [pid 5070] close(3 [pid 5065] <... close resumed>) = 0 [pid 6534] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... close resumed>) = 0 [ 147.348589][ T6531] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.367741][ T6532] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.379993][ T6534] loop2: detected capacity change from 0 to 1024 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6536 attached [pid 6526] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6526] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6538 attached ./strace-static-x86_64: Process 6537 attached [pid 6536] set_robust_list(0x555555fbc6a0, 24 [pid 6535] <... creat resumed>) = 5 [pid 6534] <... ioctl resumed>) = 0 [pid 6526] <... futex resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6536 [pid 6535] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] close(3 [pid 6528] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6537 [pid 6535] <... futex resumed>) = 0 [pid 6534] <... close resumed>) = 0 [pid 6537] set_robust_list(0x555555fbc6a0, 24 [pid 6536] <... set_robust_list resumed>) = 0 [pid 6535] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6534] mkdir("./bus", 0777 [pid 6526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6538 [pid 6538] set_robust_list(0x555555fbc6a0, 24 [pid 6534] <... mkdir resumed>) = 0 [pid 6534] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6538] <... set_robust_list resumed>) = 0 [pid 6537] <... set_robust_list resumed>) = 0 [pid 6536] chdir("./81" [pid 6526] <... mmap resumed>) = 0x7efd7cefb000 [pid 6538] chdir("./81" [pid 6537] chdir("./80" [pid 6536] <... chdir resumed>) = 0 [pid 6526] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6538] <... chdir resumed>) = 0 [pid 6537] <... chdir resumed>) = 0 [pid 6536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6526] <... mprotect resumed>) = 0 [ 147.396018][ T6532] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.402114][ T6531] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.412473][ T6531] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.421347][ T6532] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.429501][ T6531] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.437286][ T6532] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6538] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6536] <... prctl resumed>) = 0 [pid 6526] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6538] <... prctl resumed>) = 0 [pid 6537] <... prctl resumed>) = 0 [pid 6536] setpgid(0, 0 [pid 6526] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6538] setpgid(0, 0 [pid 6537] setpgid(0, 0 [pid 6526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6536] <... setpgid resumed>) = 0 [pid 6536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6537] <... setpgid resumed>) = 0 [pid 6536] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6539 attached [pid 6538] <... setpgid resumed>) = 0 [pid 6526] <... clone3 resumed> => {parent_tid=[6539]}, 88) = 6539 [pid 6539] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6526] rt_sigprocmask(SIG_SETMASK, [], [pid 6539] <... rseq resumed>) = 0 [pid 6538] <... openat resumed>) = 3 [pid 6526] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6539] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6538] write(3, "1000", 4 [pid 6537] <... openat resumed>) = 3 [pid 6526] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... set_robust_list resumed>) = 0 [pid 6538] <... write resumed>) = 4 [pid 6537] write(3, "1000", 4 [pid 6536] write(3, "1000", 4 [pid 6534] <... mount resumed>) = 0 [pid 6526] <... futex resumed>) = 0 [pid 6539] rt_sigprocmask(SIG_SETMASK, [], [pid 6538] close(3 [pid 6537] <... write resumed>) = 4 [pid 6536] <... write resumed>) = 4 [pid 6534] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6532] <... write resumed>) = 57344 [pid 6531] <... write resumed>) = 57344 [pid 6526] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6538] <... close resumed>) = 0 [pid 6537] close(3 [pid 6536] close(3 [pid 6534] <... openat resumed>) = 3 [pid 6532] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] creat("./file1", 000 [pid 6538] symlink("/dev/binderfs", "./binderfs" [pid 6537] <... close resumed>) = 0 [pid 6536] <... close resumed>) = 0 [pid 6534] chdir("./bus" [pid 6532] <... futex resumed>) = 0 [pid 6531] <... futex resumed>) = 0 [pid 6528] exit_group(0 [pid 6538] <... symlink resumed>) = 0 [pid 6537] symlink("/dev/binderfs", "./binderfs" [pid 6536] symlink("/dev/binderfs", "./binderfs" [pid 6535] <... futex resumed>) = ? [pid 6534] <... chdir resumed>) = 0 [pid 6528] <... exit_group resumed>) = ? [pid 6539] <... creat resumed>) = 5 [pid 6538] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... symlink resumed>) = 0 [pid 6536] <... symlink resumed>) = 0 [pid 6535] +++ exited with 0 +++ [pid 6534] ioctl(4, LOOP_CLR_FD [pid 6532] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6531] +++ exited with 0 +++ [pid 6539] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = 0 [pid 6537] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... ioctl resumed>) = 0 [pid 6528] +++ exited with 0 +++ [pid 6539] <... futex resumed>) = 1 [pid 6538] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6537] <... futex resumed>) = 0 [pid 6536] <... futex resumed>) = 0 [pid 6534] close(4 [pid 6526] <... futex resumed>) = 0 [pid 6539] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6537] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6536] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6534] <... close resumed>) = 0 [pid 6526] exit_group(0 [pid 6539] <... futex resumed>) = ? [pid 6538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6537] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6536] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6534] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] <... futex resumed>) = ? [pid 6526] <... exit_group resumed>) = ? [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6528, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 6539] +++ exited with 0 +++ [pid 6538] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 147.455321][ T6532] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.462586][ T6531] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.471412][ T6532] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6534] <... futex resumed>) = 1 [pid 6533] <... futex resumed>) = 0 [pid 6532] +++ exited with 0 +++ [pid 5069] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6533] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6538] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6534] creat("./bus", 000 [pid 6533] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6538] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6537] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6536] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6534] <... creat resumed>) = 4 [pid 6533] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6526] +++ exited with 0 +++ [pid 5069] <... openat resumed>) = 3 [pid 6538] <... mprotect resumed>) = 0 [pid 6537] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6536] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6534] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(3, "", [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6526, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6538] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6537] <... mprotect resumed>) = 0 [pid 6536] <... mprotect resumed>) = 0 [pid 6534] <... futex resumed>) = 1 [pid 6533] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6538] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6537] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6536] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6534] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6533] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 6538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6537] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6536] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6533] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6540 attached [pid 6537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6533] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6542 attached ./strace-static-x86_64: Process 6541 attached [pid 6540] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6538] <... clone3 resumed> => {parent_tid=[6540]}, 88) = 6540 [pid 5068] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6541] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5068] newfstatat(3, "", [pid 6541] <... rseq resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6541] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5068] getdents64(3, [pid 6541] <... set_robust_list resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6541] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6541] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6541] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6540] <... rseq resumed>) = 0 [pid 6538] rt_sigprocmask(SIG_SETMASK, [], [pid 6537] <... clone3 resumed> => {parent_tid=[6542]}, 88) = 6542 [pid 6536] <... clone3 resumed> => {parent_tid=[6541]}, 88) = 6541 [pid 6542] <... rseq resumed>) = 0 [pid 6540] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6542] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6540] <... set_robust_list resumed>) = 0 [pid 6538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6537] rt_sigprocmask(SIG_SETMASK, [], [pid 6536] rt_sigprocmask(SIG_SETMASK, [], [pid 6542] <... set_robust_list resumed>) = 0 [pid 6540] rt_sigprocmask(SIG_SETMASK, [], [pid 6538] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6542] rt_sigprocmask(SIG_SETMASK, [], [pid 6540] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6538] <... futex resumed>) = 0 [pid 6537] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6542] memfd_create("syzkaller", 0 [pid 6541] <... futex resumed>) = 0 [pid 6540] memfd_create("syzkaller", 0 [pid 6538] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 0 [pid 6536] <... futex resumed>) = 1 [pid 5069] <... umount2 resumed>) = 0 [pid 6542] <... memfd_create resumed>) = 3 [pid 6541] memfd_create("syzkaller", 0 [pid 6537] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6540] <... memfd_create resumed>) = 3 [pid 6540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6536] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6541] <... memfd_create resumed>) = 3 [pid 6540] <... mmap resumed>) = 0x7efd74b1c000 [pid 6533] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6533] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6541] <... mmap resumed>) = 0x7efd74b1c000 [pid 6533] <... futex resumed>) = 0 [pid 6533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6533] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6533] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6541] <... write resumed>) = 524288 [pid 6540] <... write resumed>) = 524288 [pid 6533] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] newfstatat(AT_FDCWD, "./80/bus", [pid 6533] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6543]}, 88) = 6543 [pid 6533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6543 attached [pid 6533] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6543] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6533] <... futex resumed>) = 0 [pid 6543] <... rseq resumed>) = 0 [pid 6533] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6543] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6543] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6543] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 147.548532][ T6534] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.552241][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 147.556055][ T6534] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.570632][ T58] hfsplus: b-tree write err: -5, ino 4 [ 147.574720][ T6534] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6543] creat("./file1", 000 [pid 5069] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6541] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6542] <... write resumed>) = 524288 [pid 6541] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6540] munmap(0x7efd74b1c000, 138412032 [pid 5069] getdents64(4, [pid 5068] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] <... munmap resumed>) = 0 [pid 5069] getdents64(4, [pid 5068] newfstatat(AT_FDCWD, "./81/bus", [pid 6541] <... openat resumed>) = 4 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6541] ioctl(4, LOOP_SET_FD, 3 [pid 5069] close(4 [pid 5068] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6542] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] rmdir("./80/bus" [pid 5068] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6540] <... openat resumed>) = 4 [pid 5069] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(4, "", [pid 6540] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6543] <... creat resumed>) = 5 [pid 6543] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6533] <... futex resumed>) = 0 [ 147.629823][ T6534] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.654861][ T6541] loop1: detected capacity change from 0 to 1024 [ 147.664920][ T6540] loop5: detected capacity change from 0 to 1024 [ 147.672521][ T6534] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6543] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6542] <... munmap resumed>) = 0 [pid 6540] <... ioctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] getdents64(4, [pid 6542] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] unlink("./80/binderfs" [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6542] <... openat resumed>) = 4 [pid 6540] close(3 [pid 5069] <... unlink resumed>) = 0 [pid 5068] getdents64(4, [pid 6542] ioctl(4, LOOP_SET_FD, 3 [pid 6540] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6541] <... ioctl resumed>) = 0 [pid 6541] close(3) = 0 [pid 6541] mkdir("./bus", 0777) = 0 [pid 6542] <... ioctl resumed>) = 0 [pid 6540] mkdir("./bus", 0777 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 6542] close(3 [pid 5069] close(3 [pid 5068] <... close resumed>) = 0 [pid 6541] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./81/bus" [pid 6542] <... close resumed>) = 0 [pid 6540] <... mkdir resumed>) = 0 [pid 5069] rmdir("./80" [pid 6542] mkdir("./bus", 0777 [pid 6540] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6542] <... mkdir resumed>) = 0 [pid 5069] mkdir("./81", 0777 [pid 5068] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] <... mount resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] unlink("./81/binderfs") = 0 [pid 6540] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5068] getdents64(3, [pid 6540] <... openat resumed>) = 3 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 5069] close(3 [pid 6540] chdir("./bus" [pid 5068] <... close resumed>) = 0 [pid 6540] <... chdir resumed>) = 0 [pid 5068] rmdir("./81" [pid 6540] ioctl(4, LOOP_CLR_FD [pid 6542] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6540] <... ioctl resumed>) = 0 [pid 6541] <... mount resumed>) = 0 [pid 6541] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6540] close(4) = 0 [pid 6540] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6538] <... futex resumed>) = 0 [pid 6540] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6538] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6538] <... futex resumed>) = 0 [pid 6540] creat("./bus", 000 [pid 6538] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... rmdir resumed>) = 0 [pid 6541] chdir("./bus") = 0 [pid 6540] <... creat resumed>) = 4 [pid 6541] ioctl(4, LOOP_CLR_FD [pid 6540] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5068] mkdir("./82", 0777 [pid 6541] <... ioctl resumed>) = 0 [pid 6540] <... futex resumed>) = 1 [pid 6538] <... futex resumed>) = 0 [pid 6534] <... write resumed>) = 57344 [pid 6541] close(4 [pid 6538] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mkdir resumed>) = 0 [pid 6540] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6541] <... close resumed>) = 0 [pid 6538] <... futex resumed>) = 0 [pid 6534] <... futex resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6538] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] exit_group(0 [pid 6543] <... futex resumed>) = ? [pid 6533] <... exit_group resumed>) = ? [pid 5068] <... openat resumed>) = 3 [pid 6543] +++ exited with 0 +++ [pid 6541] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [ 147.679861][ T6534] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.692565][ T6542] loop0: detected capacity change from 0 to 1024 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6541] <... futex resumed>) = 1 [pid 6536] <... futex resumed>) = 0 [pid 6541] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6536] <... futex resumed>) = 0 [pid 6536] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6541] creat("./bus", 000) = 4 [pid 5068] close(3) = 0 [pid 6534] +++ exited with 0 +++ [pid 6533] +++ exited with 0 +++ [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6541] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6533, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6541] <... futex resumed>) = 1 [pid 6536] <... futex resumed>) = 0 [pid 6541] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6536] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6536] <... futex resumed>) = 0 [pid 6542] <... mount resumed>) = 0 [pid 6541] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6536] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6542] chdir("./bus") = 0 [pid 6542] ioctl(4, LOOP_CLR_FD) = 0 [pid 6542] close(4) = 0 [pid 6542] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6537] <... futex resumed>) = 0 [pid 6542] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6537] <... futex resumed>) = 0 [pid 6542] creat("./bus", 000 [pid 6537] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6542] <... creat resumed>) = 4 [pid 6542] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6545 attached ./strace-static-x86_64: Process 6544 attached [pid 6545] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6545] chdir("./82" [pid 6544] set_robust_list(0x555555fbc6a0, 24 [pid 6545] <... chdir resumed>) = 0 [pid 6544] <... set_robust_list resumed>) = 0 [pid 6545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6544] chdir("./81" [pid 6545] <... prctl resumed>) = 0 [pid 6544] <... chdir resumed>) = 0 [pid 6545] setpgid(0, 0 [pid 6544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6545] <... setpgid resumed>) = 0 [pid 6544] <... prctl resumed>) = 0 [pid 6545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6544] setpgid(0, 0 [pid 6545] <... openat resumed>) = 3 [pid 6544] <... setpgid resumed>) = 0 [pid 6545] write(3, "1000", 4 [pid 6544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6545] <... write resumed>) = 4 [pid 6544] <... openat resumed>) = 3 [pid 6545] close(3 [pid 6542] <... futex resumed>) = 1 [pid 6537] <... futex resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6544 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6545 [pid 5067] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6545] <... close resumed>) = 0 [pid 6544] write(3, "1000", 4 [pid 6542] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6537] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6545] symlink("/dev/binderfs", "./binderfs" [pid 6544] <... write resumed>) = 4 [pid 6538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6537] <... futex resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6538] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 6538] <... futex resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 6538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6545] <... symlink resumed>) = 0 [pid 6544] close(3 [pid 6538] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6544] <... close resumed>) = 0 [pid 6538] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] getdents64(3, [pid 6545] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6544] symlink("/dev/binderfs", "./binderfs" [pid 6538] <... mprotect resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6545] <... futex resumed>) = 0 [pid 6544] <... symlink resumed>) = 0 [pid 6545] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6544] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 147.760844][ T6540] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.776233][ T6540] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.780250][ T6541] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.794858][ T6540] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] <... futex resumed>) = 0 [pid 6536] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6544] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6536] <... futex resumed>) = 0 [pid 6545] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6544] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6545] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6536] <... mmap resumed>) = 0x7efd7cefb000 [pid 6545] <... mprotect resumed>) = 0 [pid 6544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6536] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6536] <... mprotect resumed>) = 0 [pid 6545] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6544] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6536] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6544] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6536] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6544] <... mprotect resumed>) = 0 [pid 6538] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6545] <... clone3 resumed> => {parent_tid=[6546]}, 88) = 6546 [pid 6544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6538] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6547 attached ./strace-static-x86_64: Process 6546 attached [pid 6547] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6547] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6538] <... clone3 resumed> => {parent_tid=[6548]}, 88) = 6548 [pid 6547] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6548 attached [pid 6547] rt_sigprocmask(SIG_SETMASK, [], [pid 6538] rt_sigprocmask(SIG_SETMASK, [], [pid 6536] <... clone3 resumed> => {parent_tid=[6547]}, 88) = 6547 [pid 6546] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6545] rt_sigprocmask(SIG_SETMASK, [], [pid 6544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6536] rt_sigprocmask(SIG_SETMASK, [], [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6536] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6546] <... rseq resumed>) = 0 [pid 6545] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6536] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6545] <... futex resumed>) = 0 [pid 6544] <... clone3 resumed> => {parent_tid=[6549]}, 88) = 6549 [pid 6536] <... futex resumed>) = 0 [pid 6546] <... set_robust_list resumed>) = 0 [pid 6545] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6544] rt_sigprocmask(SIG_SETMASK, [], [pid 6536] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] rt_sigprocmask(SIG_SETMASK, [], [pid 6544] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6549 attached [pid 6546] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6548] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6547] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6546] memfd_create("syzkaller", 0 [pid 6544] <... futex resumed>) = 0 [pid 6538] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6549] <... rseq resumed>) = 0 [pid 6546] <... memfd_create resumed>) = 3 [pid 6544] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6537] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6548] <... rseq resumed>) = 0 [pid 6547] creat("./file1", 000 [pid 6546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6538] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... futex resumed>) = 0 [pid 6538] <... futex resumed>) = 0 [pid 6549] <... set_robust_list resumed>) = 0 [pid 6546] <... mmap resumed>) = 0x7efd74b1c000 [pid 6537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6548] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6538] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] rt_sigprocmask(SIG_SETMASK, [], [pid 6548] <... set_robust_list resumed>) = 0 [pid 6546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6537] <... mmap resumed>) = 0x7efd7cefb000 [pid 6549] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6537] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6549] memfd_create("syzkaller", 0 [pid 6537] <... mprotect resumed>) = 0 [pid 6549] <... memfd_create resumed>) = 3 [pid 6537] rt_sigprocmask(SIG_BLOCK, ~[], [ 147.811343][ T47] hfsplus: b-tree write err: -5, ino 4 [ 147.812396][ T6542] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.826213][ T6541] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.827494][ T6540] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.843674][ T6541] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6537] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6548] rt_sigprocmask(SIG_SETMASK, [], [pid 6537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6548] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6537] <... clone3 resumed> => {parent_tid=[6550]}, 88) = 6550 [pid 6537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6537] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6550 attached [pid 6548] creat("./file1", 000 [pid 6546] <... write resumed>) = 524288 [pid 6537] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... umount2 resumed>) = 0 [pid 6550] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6536] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6550] <... rseq resumed>) = 0 [pid 6550] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6550] creat("./file1", 000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./79/bus", [pid 6548] <... creat resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6549] <... write resumed>) = 524288 [pid 6546] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6549] munmap(0x7efd74b1c000, 138412032 [pid 6546] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6549] <... munmap resumed>) = 0 [pid 6546] <... openat resumed>) = 4 [ 147.867540][ T6542] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.878606][ T6541] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.898805][ T6542] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.910557][ T6541] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6549] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6546] ioctl(4, LOOP_SET_FD, 3 [pid 6548] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6549] <... openat resumed>) = 4 [pid 6548] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6548] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6549] ioctl(4, LOOP_SET_FD, 3 [pid 6537] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... openat resumed>) = 4 [pid 5067] newfstatat(4, "", [pid 6546] <... ioctl resumed>) = 0 [pid 6546] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6547] <... creat resumed>) = 5 [pid 6546] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 6547] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] mkdir("./bus", 0777 [pid 6547] <... futex resumed>) = 0 [pid 6546] <... mkdir resumed>) = 0 [ 147.917607][ T6546] loop3: detected capacity change from 0 to 1024 [ 147.919182][ T6541] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.925278][ T6540] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.940714][ T6542] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.943179][ T6549] loop4: detected capacity change from 0 to 1024 [ 147.953799][ T6542] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6549] <... ioctl resumed>) = 0 [pid 6547] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6546] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6541] <... write resumed>) = 57344 [pid 6549] close(3 [pid 5067] getdents64(4, [pid 6541] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6550] <... creat resumed>) = 5 [pid 6549] <... close resumed>) = 0 [pid 6541] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] close(4) = 0 [pid 6550] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] mkdir("./bus", 0777 [pid 6542] <... write resumed>) = 57344 [pid 6540] <... write resumed>) = 57344 [pid 5067] rmdir("./79/bus" [pid 6550] <... futex resumed>) = 0 [pid 6549] <... mkdir resumed>) = 0 [pid 6542] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] exit_group(0 [pid 6536] exit_group(0 [pid 6550] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6549] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6548] <... futex resumed>) = ? [pid 6547] <... futex resumed>) = ? [pid 6546] <... mount resumed>) = 0 [pid 6542] <... futex resumed>) = 0 [pid 6541] <... futex resumed>) = ? [pid 6540] <... futex resumed>) = ? [pid 6538] <... exit_group resumed>) = ? [pid 6536] <... exit_group resumed>) = ? [pid 5067] <... rmdir resumed>) = 0 [pid 6548] +++ exited with 0 +++ [pid 6547] +++ exited with 0 +++ [pid 6542] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6541] +++ exited with 0 +++ [pid 6540] +++ exited with 0 +++ [pid 6537] exit_group(0 [pid 5067] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6550] <... futex resumed>) = ? [ 147.956093][ T6540] hfsplus: request for non-existent node 16715520 in B*Tree [ 147.981108][ T6542] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6542] <... futex resumed>) = ? [pid 6538] +++ exited with 0 +++ [pid 6537] <... exit_group resumed>) = ? [pid 6536] +++ exited with 0 +++ [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6550] +++ exited with 0 +++ [pid 6542] +++ exited with 0 +++ [pid 5067] newfstatat(AT_FDCWD, "./79/binderfs", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6536, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6537] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6538, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5067] unlink("./79/binderfs" [pid 6546] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6549] <... mount resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6537, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6549] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6546] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] <... openat resumed>) = 3 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 6549] chdir("./bus" [pid 5065] <... restart_syscall resumed>) = 0 [pid 6549] <... chdir resumed>) = 0 [pid 6546] chdir("./bus" [pid 5066] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6549] ioctl(4, LOOP_CLR_FD [pid 6546] <... chdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(3, "", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6549] <... ioctl resumed>) = 0 [pid 6546] ioctl(4, LOOP_CLR_FD [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6549] close(4 [pid 6546] <... ioctl resumed>) = 0 [pid 5066] getdents64(3, [pid 6549] <... close resumed>) = 0 [pid 6546] close(4 [pid 5065] <... openat resumed>) = 3 [pid 6549] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] newfstatat(3, "", [pid 5066] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6544] <... futex resumed>) = 0 [pid 6544] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6544] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6549] <... futex resumed>) = 1 [pid 6546] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6549] creat("./bus", 000 [pid 6545] <... futex resumed>) = 0 [pid 6545] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6545] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6546] <... futex resumed>) = 1 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6549] <... creat resumed>) = 4 [pid 5067] getdents64(3, [pid 6549] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6549] <... futex resumed>) = 1 [pid 6546] creat("./bus", 000 [pid 6544] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6549] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6546] <... creat resumed>) = 4 [pid 6544] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 6544] <... futex resumed>) = 0 [pid 5070] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6546] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5065] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6546] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6545] <... futex resumed>) = 0 [pid 6544] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./79" [pid 6545] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] mkdir("./80", 0777 [pid 5070] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6546] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6545] <... futex resumed>) = 0 [pid 5070] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 6545] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6551 [pid 6544] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6544] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6551 attached [ 148.068230][ T47] hfsplus: b-tree write err: -5, ino 4 [ 148.083476][ T58] hfsplus: b-tree write err: -5, ino 4 [ 148.093823][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 148.097162][ T6546] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.103140][ T6549] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6551] set_robust_list(0x555555fbc6a0, 24 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6551] <... set_robust_list resumed>) = 0 [pid 6551] chdir("./80" [pid 5065] newfstatat(AT_FDCWD, "./80/bus", [pid 6544] <... mmap resumed>) = 0x7efd7cefb000 [pid 6551] <... chdir resumed>) = 0 [pid 6545] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... umount2 resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6545] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6545] <... futex resumed>) = 0 [pid 6544] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6551] <... prctl resumed>) = 0 [pid 5066] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6551] setpgid(0, 0 [pid 6545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6551] <... setpgid resumed>) = 0 [pid 6545] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6545] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6545] <... mprotect resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./81/bus", [pid 5065] <... openat resumed>) = 4 [pid 6545] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] newfstatat(4, "", [pid 6545] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6544] <... mprotect resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6545] <... clone3 resumed> => {parent_tid=[6552]}, 88) = 6552 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 6552 attached [pid 6545] rt_sigprocmask(SIG_SETMASK, [], [pid 6552] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6545] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6544] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6552] <... rseq resumed>) = 0 [pid 6545] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6552] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6545] <... futex resumed>) = 0 [pid 5065] getdents64(4, [pid 6552] <... set_robust_list resumed>) = 0 [pid 6545] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6552] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] close(4 [pid 6552] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6551] <... openat resumed>) = 3 [ 148.130283][ T6546] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.140493][ T6546] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.161691][ T6549] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.171058][ T6546] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6544] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 6552] creat("./file1", 000 [pid 5065] rmdir("./80/bus" [pid 5070] newfstatat(AT_FDCWD, "./81/bus", [pid 5066] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6552] <... creat resumed>) = 5 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(4, "", [pid 6552] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6552] <... futex resumed>) = 1 [pid 6545] <... futex resumed>) = 0 [pid 5065] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6544] <... clone3 resumed> => {parent_tid=[6553]}, 88) = 6553 [pid 5070] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6552] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6551] write(3, "1000", 4 [pid 5065] newfstatat(AT_FDCWD, "./80/binderfs", [pid 6551] <... write resumed>) = 4 ./strace-static-x86_64: Process 6553 attached [pid 6551] close(3 [pid 6544] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6553] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6551] <... close resumed>) = 0 [pid 6544] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(4, "", [pid 5065] unlink("./80/binderfs" [pid 6553] <... rseq resumed>) = 0 [pid 6551] symlink("/dev/binderfs", "./binderfs" [pid 6544] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, [pid 6553] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6544] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 6553] <... set_robust_list resumed>) = 0 [pid 6544] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6553] rt_sigprocmask(SIG_SETMASK, [], [pid 6551] <... symlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] close(4 [pid 6553] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6551] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 6553] creat("./file1", 000 [pid 6551] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./81/bus" [pid 5065] getdents64(3, [pid 5070] close(4 [pid 5066] <... rmdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5066] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] rmdir("./81/bus" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] unlink("./81/binderfs") = 0 [pid 5070] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] newfstatat(AT_FDCWD, "./81/binderfs", [pid 5066] close(3) = 0 [pid 5066] rmdir("./81") = 0 [pid 5066] mkdir("./82", 0777 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./81/binderfs" [pid 5065] close(3 [pid 5070] <... unlink resumed>) = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./81") = 0 [pid 5070] mkdir("./82", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] close(3 [pid 5070] <... openat resumed>) = 3 [ 148.190756][ T6549] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.212510][ T6546] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.224826][ T6549] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] <... close resumed>) = 0 [pid 6551] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6553] <... creat resumed>) = 5 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6553] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3 [pid 6553] <... futex resumed>) = 1 [pid 6544] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6553] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6555 attached ./strace-static-x86_64: Process 6554 attached [pid 6551] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6546] <... write resumed>) = 57344 [pid 5065] rmdir("./80" [pid 6551] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6546] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 6545] exit_group(0 [pid 5065] mkdir("./81", 0777 [pid 6552] <... futex resumed>) = ? [pid 6551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6545] <... exit_group resumed>) = ? [pid 6552] +++ exited with 0 +++ [pid 6551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6555 [pid 5065] <... mkdir resumed>) = 0 [pid 6555] set_robust_list(0x555555fbc6a0, 24 [pid 6554] set_robust_list(0x555555fbc6a0, 24 [pid 6551] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6554 [pid 6551] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6546] <... futex resumed>) = ? [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6555] <... set_robust_list resumed>) = 0 [pid 6554] <... set_robust_list resumed>) = 0 [pid 6551] <... mprotect resumed>) = 0 [pid 6546] +++ exited with 0 +++ [pid 6545] +++ exited with 0 +++ [pid 5065] <... openat resumed>) = 3 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6545, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6554] chdir("./82" [pid 6551] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6555] chdir("./82" [pid 6554] <... chdir resumed>) = 0 [pid 6551] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6555] <... chdir resumed>) = 0 [pid 6554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6551] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] close(3 [pid 6555] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6554] <... prctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6555] <... prctl resumed>) = 0 [pid 6554] setpgid(0, 0 [pid 6555] setpgid(0, 0 [pid 6554] <... setpgid resumed>) = 0 [ 148.241721][ T6546] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.260589][ T6549] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6556 attached [pid 6551] <... clone3 resumed> => {parent_tid=[6556]}, 88) = 6556 [pid 5068] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6555] <... setpgid resumed>) = 0 [pid 6554] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6554] write(3, "1000", 4 [pid 6555] <... openat resumed>) = 3 [pid 6554] <... write resumed>) = 4 [pid 5068] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6555] write(3, "1000", 4 [pid 6554] close(3 [pid 6555] <... write resumed>) = 4 [pid 6554] <... close resumed>) = 0 [pid 6555] close(3 [pid 6554] symlink("/dev/binderfs", "./binderfs" [pid 6555] <... close resumed>) = 0 [pid 6554] <... symlink resumed>) = 0 [pid 6555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6554] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 0 [pid 6555] <... futex resumed>) = 0 [pid 6554] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6555] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6554] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6555] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6555] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6556] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6551] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... openat resumed>) = 3 [pid 6556] <... rseq resumed>) = 0 [pid 6555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6554] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] newfstatat(3, "", [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6557 [pid 6556] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6555] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6554] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6551] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6557 attached [pid 6556] <... set_robust_list resumed>) = 0 [pid 6555] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6554] <... mprotect resumed>) = 0 [pid 6551] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 6557] set_robust_list(0x555555fbc6a0, 24 [pid 6556] rt_sigprocmask(SIG_SETMASK, [], [pid 6555] <... mprotect resumed>) = 0 [pid 6554] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6549] <... write resumed>) = 57344 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6557] <... set_robust_list resumed>) = 0 [pid 6556] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6555] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6554] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6551] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6549] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] chdir("./81" [pid 6555] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6549] <... futex resumed>) = 0 [pid 6544] exit_group(0./strace-static-x86_64: Process 6558 attached [pid 6557] <... chdir resumed>) = 0 [pid 6556] memfd_create("syzkaller", 0 [pid 6555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6553] <... futex resumed>) = ? [pid 6544] <... exit_group resumed>) = ? [pid 6558] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6554] <... clone3 resumed> => {parent_tid=[6558]}, 88) = 6558 [pid 6553] +++ exited with 0 +++ [pid 6549] +++ exited with 0 +++ [pid 6544] +++ exited with 0 +++ [pid 6558] <... rseq resumed>) = 0 [pid 6557] <... prctl resumed>) = 0 [pid 6555] <... clone3 resumed> => {parent_tid=[6559]}, 88) = 6559 [pid 6554] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6559 attached [pid 6558] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6557] setpgid(0, 0 [pid 6556] <... memfd_create resumed>) = 3 [pid 6555] rt_sigprocmask(SIG_SETMASK, [], [pid 6554] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6544, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6559] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6558] <... set_robust_list resumed>) = 0 [pid 6557] <... setpgid resumed>) = 0 [pid 6556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6554] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... rseq resumed>) = 0 [pid 6558] rt_sigprocmask(SIG_SETMASK, [], [pid 6557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6556] <... mmap resumed>) = 0x7efd74b1c000 [pid 6555] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 0 [pid 6559] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6558] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6557] <... openat resumed>) = 3 [pid 6555] <... futex resumed>) = 0 [pid 6554] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6558] memfd_create("syzkaller", 0 [pid 6555] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6558] <... memfd_create resumed>) = 3 [pid 6557] write(3, "1000", 4 [pid 6558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6557] <... write resumed>) = 4 [pid 6559] <... set_robust_list resumed>) = 0 [pid 6557] close(3 [pid 6556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6559] rt_sigprocmask(SIG_SETMASK, [], [pid 6558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6557] <... close resumed>) = 0 [pid 6556] <... write resumed>) = 524288 [pid 6559] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6557] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] memfd_create("syzkaller", 0 [pid 6557] <... futex resumed>) = 0 [pid 6559] <... memfd_create resumed>) = 3 [pid 5069] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6557] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6559] <... mmap resumed>) = 0x7efd74b1c000 [pid 6557] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6556] munmap(0x7efd74b1c000, 138412032 [pid 6557] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6556] <... munmap resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5069] <... openat resumed>) = 3 [pid 6559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6557] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... umount2 resumed>) = 0 [ 148.298064][ T6549] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.333738][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 5069] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6558] <... write resumed>) = 524288 [pid 6557] <... mprotect resumed>) = 0 [pid 6556] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6557] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6556] <... openat resumed>) = 4 [pid 6557] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6556] ioctl(4, LOOP_SET_FD, 3 [pid 6557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] getdents64(3, [pid 5068] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6557] <... clone3 resumed> => {parent_tid=[6560]}, 88) = 6560 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6557] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6560 attached NULL, 8) = 0 [pid 6560] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6557] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] <... rseq resumed>) = 0 [pid 6557] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] newfstatat(AT_FDCWD, "./82/bus", [pid 6560] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6557] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6560] <... set_robust_list resumed>) = 0 [pid 5069] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6560] memfd_create("syzkaller", 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6560] <... memfd_create resumed>) = 3 [pid 6558] munmap(0x7efd74b1c000, 138412032 [pid 6560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6558] <... munmap resumed>) = 0 [pid 6560] <... mmap resumed>) = 0x7efd74b1c000 [pid 6556] <... ioctl resumed>) = 0 [pid 6560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6558] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6556] close(3 [pid 5068] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6558] <... openat resumed>) = 4 [pid 6556] <... close resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6556] mkdir("./bus", 0777 [pid 6559] <... write resumed>) = 524288 [pid 5068] newfstatat(4, "", [pid 6558] ioctl(4, LOOP_SET_FD, 3 [pid 6556] <... mkdir resumed>) = 0 [pid 6558] <... ioctl resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6559] munmap(0x7efd74b1c000, 138412032 [pid 6560] <... write resumed>) = 524288 [pid 6556] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6559] <... munmap resumed>) = 0 [pid 6559] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] getdents64(4, [pid 6559] <... openat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6559] ioctl(4, LOOP_SET_FD, 3 [ 148.388031][ T6556] loop2: detected capacity change from 0 to 1024 [ 148.402581][ T47] hfsplus: b-tree write err: -5, ino 4 [ 148.412511][ T6558] loop1: detected capacity change from 0 to 1024 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6556] <... mount resumed>) = 0 [pid 5068] close(4 [pid 6556] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] <... close resumed>) = 0 [pid 6556] <... openat resumed>) = 3 [pid 6556] chdir("./bus" [pid 5068] rmdir("./82/bus" [pid 6558] close(3 [pid 6556] <... chdir resumed>) = 0 [pid 6558] <... close resumed>) = 0 [pid 6556] ioctl(4, LOOP_CLR_FD [pid 6558] mkdir("./bus", 0777 [pid 6556] <... ioctl resumed>) = 0 [pid 6560] munmap(0x7efd74b1c000, 138412032 [pid 6558] <... mkdir resumed>) = 0 [pid 6556] close(4 [pid 5068] <... rmdir resumed>) = 0 [pid 6560] <... munmap resumed>) = 0 [pid 6556] <... close resumed>) = 0 [pid 6556] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6558] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6556] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6560] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6560] ioctl(4, LOOP_SET_FD, 3 [pid 6559] <... ioctl resumed>) = 0 [pid 6551] <... futex resumed>) = 0 [pid 5068] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6551] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6551] <... futex resumed>) = 1 [pid 6559] close(3 [pid 6558] <... mount resumed>) = 0 [pid 6551] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6559] <... close resumed>) = 0 [pid 6559] mkdir("./bus", 0777 [pid 5068] unlink("./82/binderfs" [pid 6559] <... mkdir resumed>) = 0 [pid 6558] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6556] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6559] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] getdents64(3, [pid 6558] <... openat resumed>) = 3 [pid 6556] creat("./bus", 000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 6556] <... creat resumed>) = 4 [pid 5068] <... close resumed>) = 0 [pid 6558] chdir("./bus") = 0 [pid 6558] ioctl(4, LOOP_CLR_FD) = 0 [pid 6558] close(4) = 0 [pid 6558] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6554] <... futex resumed>) = 0 [pid 6558] creat("./bus", 000 [pid 6554] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6558] <... creat resumed>) = 4 [pid 6554] <... futex resumed>) = 0 [pid 5069] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./82" [pid 6554] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./83", 0777 [pid 5069] newfstatat(AT_FDCWD, "./81/bus", [pid 6560] <... ioctl resumed>) = 0 [pid 6558] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 6560] close(3 [pid 6558] <... futex resumed>) = 1 [pid 6554] <... futex resumed>) = 0 [pid 5069] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6560] <... close resumed>) = 0 [pid 6558] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6554] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 148.432654][ T6559] loop5: detected capacity change from 0 to 1024 [ 148.450370][ T6560] loop0: detected capacity change from 0 to 1024 [pid 6560] mkdir("./bus", 0777 [pid 6559] <... mount resumed>) = 0 [pid 6556] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6560] <... mkdir resumed>) = 0 [pid 6559] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... openat resumed>) = 4 [pid 5068] <... openat resumed>) = 3 [pid 6551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6559] <... openat resumed>) = 3 [pid 6551] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(4, "", [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6559] chdir("./bus" [pid 6551] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6559] <... chdir resumed>) = 0 [pid 6551] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(4, [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6559] ioctl(4, LOOP_CLR_FD) = 0 [pid 6554] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] close(3 [pid 6559] close(4 [pid 5068] <... close resumed>) = 0 [pid 6559] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6559] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6560] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6559] <... futex resumed>) = 1 [pid 6556] <... futex resumed>) = 1 [pid 6551] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6561 attached [pid 6559] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6556] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6551] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=47000000} [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6561] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 5069] getdents64(4, [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6561 [pid 6561] chdir("./83" [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6561] <... chdir resumed>) = 0 [pid 5069] close(4 [pid 6561] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... close resumed>) = 0 [pid 6555] <... futex resumed>) = 0 [pid 6561] <... prctl resumed>) = 0 [pid 5069] rmdir("./81/bus" [pid 6555] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... futex resumed>) = 0 [pid 6555] <... futex resumed>) = 1 [pid 5069] <... rmdir resumed>) = 0 [pid 6559] creat("./bus", 000 [pid 6560] <... mount resumed>) = 0 [pid 6559] <... creat resumed>) = 4 [pid 6555] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6559] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] setpgid(0, 0 [pid 6559] <... futex resumed>) = 1 [pid 6555] <... futex resumed>) = 0 [pid 6559] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6555] <... futex resumed>) = 0 [pid 6561] <... setpgid resumed>) = 0 [pid 6560] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6559] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6555] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6561] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6560] <... openat resumed>) = 3 [pid 6559] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6560] chdir("./bus") = 0 [pid 6560] ioctl(4, LOOP_CLR_FD [pid 6561] <... openat resumed>) = 3 [pid 6560] <... ioctl resumed>) = 0 [pid 6560] close(4 [pid 6554] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6561] write(3, "1000", 4 [pid 6560] <... close resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./81/binderfs", [pid 6551] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6561] <... write resumed>) = 4 [pid 6560] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [ 148.506150][ T6558] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.530103][ T6556] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.546677][ T6558] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6551] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] close(3 [pid 6560] <... futex resumed>) = 1 [pid 6557] <... futex resumed>) = 0 [pid 6554] <... futex resumed>) = 0 [pid 6551] <... futex resumed>) = 0 [pid 5069] unlink("./81/binderfs" [pid 6561] <... close resumed>) = 0 [pid 6560] creat("./bus", 000 [pid 6557] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6551] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6561] symlink("/dev/binderfs", "./binderfs" [pid 6560] <... creat resumed>) = 4 [pid 6557] <... futex resumed>) = 0 [pid 6554] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... unlink resumed>) = 0 [pid 6560] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6557] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6551] <... mmap resumed>) = 0x7efd7cefb000 [pid 6560] <... futex resumed>) = 0 [pid 6557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6560] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6557] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6554] <... mprotect resumed>) = 0 [pid 6557] <... futex resumed>) = 0 [pid 6557] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6554] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6561] <... symlink resumed>) = 0 [pid 6554] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6551] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] getdents64(3, [pid 6551] <... mprotect resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6551] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] close(3 [pid 6561] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6555] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6551] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... close resumed>) = 0 [pid 6554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6562]}, 88) = 6562 [pid 6554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6554] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 148.575573][ T6556] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.577504][ T6559] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.586242][ T6558] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.604840][ T6560] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.611078][ T6559] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6554] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] <... futex resumed>) = 0 [pid 6555] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6551] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] rmdir("./81"./strace-static-x86_64: Process 6562 attached [pid 6562] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6562] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6562] creat("./file1", 000./strace-static-x86_64: Process 6563 attached [pid 6561] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6555] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6557] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6557] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6557] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6557] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6564]}, 88) = 6564 [pid 6557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6557] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6557] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6563] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6561] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6555] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6551] <... clone3 resumed> => {parent_tid=[6563]}, 88) = 6563 [pid 5069] mkdir("./82", 0777 [pid 6563] <... rseq resumed>) = 0 [pid 6551] rt_sigprocmask(SIG_SETMASK, [], [pid 6563] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6555] <... mmap resumed>) = 0x7efd7cefb000 ./strace-static-x86_64: Process 6564 attached [pid 6564] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 6563] <... set_robust_list resumed>) = 0 [pid 6563] rt_sigprocmask(SIG_SETMASK, [], [pid 6561] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6555] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6551] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6563] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6555] <... mprotect resumed>) = 0 [pid 6551] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6564] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6563] creat("./file1", 000 [pid 6561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6555] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6554] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6551] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6564] <... set_robust_list resumed>) = 0 [pid 6564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 148.614677][ T6556] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.627918][ T6559] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.633105][ T6560] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.643169][ T6559] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.648791][ T6558] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.663307][ T6559] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6564] creat("./file1", 000 [pid 6561] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6555] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6551] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6555] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6561] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] close(3) = 0 [pid 6561] <... mprotect resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6563] <... creat resumed>) = 5 ./strace-static-x86_64: Process 6565 attached [pid 6563] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6555] <... clone3 resumed> => {parent_tid=[6565]}, 88) = 6565 [pid 6565] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6563] <... futex resumed>) = 1 [pid 6561] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6555] rt_sigprocmask(SIG_SETMASK, [], [pid 6551] <... futex resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6566 ./strace-static-x86_64: Process 6566 attached [pid 6565] <... rseq resumed>) = 0 [pid 6563] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6555] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6566] set_robust_list(0x555555fbc6a0, 24 [pid 6557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6555] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6567 attached [pid 6565] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6555] <... futex resumed>) = 0 [pid 6565] <... set_robust_list resumed>) = 0 [pid 6555] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6565] rt_sigprocmask(SIG_SETMASK, [], [pid 6567] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6566] <... set_robust_list resumed>) = 0 [pid 6565] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6562] <... creat resumed>) = 5 [pid 6561] <... clone3 resumed> => {parent_tid=[6567]}, 88) = 6567 [pid 6567] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6566] chdir("./82" [pid 6565] creat("./file1", 000 [pid 6567] <... set_robust_list resumed>) = 0 [pid 6566] <... chdir resumed>) = 0 [pid 6562] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [ 148.671355][ T6556] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.676471][ T6559] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.693556][ T6556] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.703390][ T6560] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.710888][ T6560] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6566] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6562] <... futex resumed>) = 0 [pid 6565] <... creat resumed>) = 5 [pid 6567] rt_sigprocmask(SIG_SETMASK, [], [pid 6566] <... prctl resumed>) = 0 [pid 6561] rt_sigprocmask(SIG_SETMASK, [], [pid 6559] <... write resumed>) = 57344 [pid 6567] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6567] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6559] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] setpgid(0, 0 [pid 6562] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6561] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6559] <... futex resumed>) = 0 [pid 6567] <... futex resumed>) = 0 [pid 6566] <... setpgid resumed>) = 0 [pid 6561] <... futex resumed>) = 1 [pid 6559] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6567] memfd_create("syzkaller", 0 [pid 6566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6561] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6567] <... memfd_create resumed>) = 3 [pid 6565] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] <... openat resumed>) = 3 [pid 6565] <... futex resumed>) = 1 [pid 6555] <... futex resumed>) = 0 [pid 6566] write(3, "1000", 4 [pid 6565] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6555] exit_group(0 [pid 6567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6566] <... write resumed>) = 4 [pid 6559] <... futex resumed>) = ? [pid 6555] <... exit_group resumed>) = ? [pid 6566] close(3 [pid 6559] +++ exited with 0 +++ [pid 6566] <... close resumed>) = 0 [pid 6566] symlink("/dev/binderfs", "./binderfs" [pid 6567] <... mmap resumed>) = 0x7efd74b1c000 [pid 6566] <... symlink resumed>) = 0 [pid 6566] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6565] <... futex resumed>) = ? [pid 6566] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6566] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6566] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6568 attached => {parent_tid=[6568]}, 88) = 6568 [pid 6564] <... creat resumed>) = 5 [pid 6556] <... write resumed>) = 57344 [pid 6568] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6564] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6556] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... rseq resumed>) = 0 [pid 6564] <... futex resumed>) = 0 [pid 6556] <... futex resumed>) = 0 [ 148.726737][ T6558] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.734786][ T6556] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.757910][ T6558] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6551] exit_group(0 [pid 6568] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6566] rt_sigprocmask(SIG_SETMASK, [], [pid 6564] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6563] <... futex resumed>) = ? [pid 6551] <... exit_group resumed>) = ? [pid 6568] <... set_robust_list resumed>) = 0 [pid 6566] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6556] +++ exited with 0 +++ [pid 6568] rt_sigprocmask(SIG_SETMASK, [], [pid 6566] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6566] <... futex resumed>) = 0 [pid 6568] memfd_create("syzkaller", 0) = 3 [pid 6566] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6563] +++ exited with 0 +++ [pid 6551] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6551, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5067] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6565] +++ exited with 0 +++ [pid 6555] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6555, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 3 [pid 5070] newfstatat(3, "", [pid 6568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6558] <... write resumed>) = 57344 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6558] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 6558] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6558] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... write resumed>) = 524288 [pid 6554] exit_group(0 [pid 6562] <... futex resumed>) = ? [pid 6558] <... futex resumed>) = ? [pid 6554] <... exit_group resumed>) = ? [pid 6562] +++ exited with 0 +++ [pid 6558] +++ exited with 0 +++ [pid 6554] +++ exited with 0 +++ [pid 6568] <... write resumed>) = 524288 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6554, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6567] munmap(0x7efd74b1c000, 138412032 [ 148.775814][ T6560] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.807550][ T6560] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.821553][ T1094] hfsplus: b-tree write err: -5, ino 4 [pid 5066] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... munmap resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6567] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 6567] <... openat resumed>) = 4 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6560] <... write resumed>) = 57344 [pid 6560] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6560] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6557] exit_group(0 [pid 6564] <... futex resumed>) = ? [pid 6557] <... exit_group resumed>) = ? [pid 6560] <... futex resumed>) = ? [pid 6564] +++ exited with 0 +++ [pid 6560] +++ exited with 0 +++ [pid 6568] munmap(0x7efd74b1c000, 138412032 [pid 6567] ioctl(4, LOOP_SET_FD, 3 [pid 6557] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6557, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6568] <... munmap resumed>) = 0 [pid 6567] <... ioctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5065] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 6567] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 6567] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6567] mkdir("./bus", 0777 [ 148.830137][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 148.855037][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 148.864707][ T6567] loop3: detected capacity change from 0 to 1024 [pid 5065] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6568] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6567] <... mkdir resumed>) = 0 [pid 5070] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6568] <... openat resumed>) = 4 [pid 6567] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] newfstatat(AT_FDCWD, "./82/bus", [pid 6568] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... mount resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6567] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] <... openat resumed>) = 4 [pid 5067] newfstatat(AT_FDCWD, "./80/bus", [pid 5070] newfstatat(4, "", [pid 6567] chdir("./bus" [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6567] <... chdir resumed>) = 0 [pid 5070] getdents64(4, [pid 6567] ioctl(4, LOOP_CLR_FD) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] close(4 [pid 5070] getdents64(4, [pid 6567] <... close resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6567] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(4 [pid 6567] <... futex resumed>) = 1 [pid 6567] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6561] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 6561] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6567] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = 1 [pid 5070] rmdir("./82/bus" [pid 5067] <... openat resumed>) = 4 [pid 6567] creat("./bus", 000 [pid 6561] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] newfstatat(4, "", [pid 5070] <... rmdir resumed>) = 0 [pid 5066] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6567] <... creat resumed>) = 4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6567] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6561] <... futex resumed>) = 0 [pid 5067] getdents64(4, [pid 5066] newfstatat(AT_FDCWD, "./82/bus", [pid 6567] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6561] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6561] <... futex resumed>) = 0 [pid 6561] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(4, [pid 5066] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] close(4 [pid 5070] unlink("./82/binderfs" [pid 5067] <... close resumed>) = 0 [ 148.889107][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 148.899468][ T6568] loop4: detected capacity change from 0 to 1024 [pid 5066] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] rmdir("./80/bus" [pid 5066] <... openat resumed>) = 4 [pid 6568] <... ioctl resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 5065] <... umount2 resumed>) = 0 [pid 6568] close(3 [pid 5067] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6568] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 6568] mkdir("./bus", 0777 [pid 5067] newfstatat(AT_FDCWD, "./80/binderfs", [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6568] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(4, [pid 5067] unlink("./80/binderfs" [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5066] close(4 [pid 5067] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] close(3 [pid 5066] rmdir("./82/bus" [pid 5067] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5067] rmdir("./80" [pid 5066] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6568] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] mkdir("./81", 0777 [pid 5066] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./82/binderfs") = 0 [pid 5070] getdents64(3, [pid 5066] getdents64(3, [pid 5065] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... close resumed>) = 0 [pid 5066] close(3) = 0 [pid 5070] rmdir("./82" [pid 5066] rmdir("./82" [pid 5065] newfstatat(AT_FDCWD, "./81/bus", [pid 5070] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5066] <... rmdir resumed>) = 0 [pid 5070] mkdir("./83", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] mkdir("./83", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... mkdir resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5070] close(3) = 0 [pid 5067] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6561] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6568] <... mount resumed>) = 0 [pid 5066] close(3./strace-static-x86_64: Process 6569 attached [pid 6561] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 6569] set_robust_list(0x555555fbc6a0, 24 [pid 6568] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6561] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6569 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6570 attached [pid 6569] <... set_robust_list resumed>) = 0 [pid 6568] <... openat resumed>) = 3 [ 148.961476][ T6567] hfsplus: request for non-existent node 16715520 in B*Tree [ 148.968904][ T6567] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6561] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6570] set_robust_list(0x555555fbc6a0, 24 [pid 6568] chdir("./bus" [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6570 [pid 6570] <... set_robust_list resumed>) = 0 [pid 6568] <... chdir resumed>) = 0 [pid 6569] chdir("./83" [pid 6568] ioctl(4, LOOP_CLR_FD [pid 6561] <... mmap resumed>) = 0x7efd7cefb000 [pid 6570] chdir("./81" [pid 6568] <... ioctl resumed>) = 0 [pid 6570] <... chdir resumed>) = 0 [pid 6568] close(4 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6571 [pid 6570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6568] <... close resumed>) = 0 [pid 6568] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6570] <... prctl resumed>) = 0 [pid 6568] <... futex resumed>) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6570] setpgid(0, 0 [pid 6569] <... chdir resumed>) = 0 [pid 6568] creat("./bus", 000 [pid 6566] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6571 attached [pid 6570] <... setpgid resumed>) = 0 [pid 6569] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6568] <... creat resumed>) = 4 [pid 6566] <... futex resumed>) = 0 [pid 6571] set_robust_list(0x555555fbc6a0, 24 [pid 6570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6569] <... prctl resumed>) = 0 [pid 6568] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6566] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] <... mprotect resumed>) = 0 [pid 5065] close(4 [pid 6566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6566] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6566] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6570] <... openat resumed>) = 3 [pid 6568] <... futex resumed>) = 1 [pid 6566] <... futex resumed>) = 0 [pid 6566] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=47000000} [pid 6568] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6571] <... set_robust_list resumed>) = 0 [pid 6569] setpgid(0, 0 [pid 5065] <... close resumed>) = 0 [pid 6569] <... setpgid resumed>) = 0 [pid 6571] chdir("./83" [pid 6570] write(3, "1000", 4) = 4 [pid 6569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] rmdir("./81/bus" [pid 6571] <... chdir resumed>) = 0 [pid 6570] close(3 [pid 6569] <... openat resumed>) = 3 [pid 6561] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... rmdir resumed>) = 0 [pid 6571] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6569] write(3, "1000", 4 [pid 6561] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6561] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6569] <... write resumed>) = 4 [pid 5065] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6572 attached [pid 6571] <... prctl resumed>) = 0 [pid 6569] close(3 [pid 6561] <... clone3 resumed> => {parent_tid=[6572]}, 88) = 6572 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6570] <... close resumed>) = 0 [ 149.005013][ T6567] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.029234][ T6567] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.046452][ T6568] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6569] <... close resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./81/binderfs", [pid 6561] rt_sigprocmask(SIG_SETMASK, [], [pid 6572] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6571] setpgid(0, 0 [pid 6569] symlink("/dev/binderfs", "./binderfs" [pid 6561] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6572] <... rseq resumed>) = 0 [pid 6571] <... setpgid resumed>) = 0 [pid 6570] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] <... symlink resumed>) = 0 [pid 6561] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] unlink("./81/binderfs" [pid 6572] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6572] <... set_robust_list resumed>) = 0 [pid 6572] rt_sigprocmask(SIG_SETMASK, [], [pid 6570] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6572] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6571] <... openat resumed>) = 3 [pid 6570] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6569] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] getdents64(3, [pid 6572] creat("./file1", 000 [pid 6570] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6569] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] close(3 [pid 6569] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6570] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6569] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5065] <... close resumed>) = 0 [pid 6570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6569] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] rmdir("./81" [pid 6571] write(3, "1000", 4 [pid 6570] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6570] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6571] <... write resumed>) = 4 [pid 6570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6571] close(3 [pid 6570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6569] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6571] <... close resumed>) = 0 [pid 6570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] mkdir("./82", 0777 [pid 6571] symlink("/dev/binderfs", "./binderfs" [pid 6569] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6570] <... clone3 resumed> => {parent_tid=[6573]}, 88) = 6573 [pid 6570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6573 attached [pid 6570] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6570] <... futex resumed>) = 0 [pid 6573] <... rseq resumed>) = 0 [pid 6573] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6570] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6573] <... set_robust_list resumed>) = 0 [pid 6566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6573] rt_sigprocmask(SIG_SETMASK, [], [pid 6566] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 6573] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6573] memfd_create("syzkaller", 0 [pid 6566] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] <... memfd_create resumed>) = 3 [pid 6566] <... futex resumed>) = 0 [pid 6573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6573] <... mmap resumed>) = 0x7efd74b1c000 [pid 6566] <... mmap resumed>) = 0x7efd7cefb000 [pid 6571] <... symlink resumed>) = 0 [pid 6569] <... mprotect resumed>) = 0 [pid 6566] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... mkdir resumed>) = 0 [pid 6571] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6566] <... mprotect resumed>) = 0 [pid 6571] <... futex resumed>) = 0 [pid 6569] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6566] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6572] <... creat resumed>) = 5 [pid 6567] <... write resumed>) = 57344 [pid 6566] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6574]}, 88) = 6574 [pid 6566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6566] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6574 attached ) = 0 [pid 6574] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6566] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6574] <... rseq resumed>) = 0 [pid 6574] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6574] rt_sigprocmask(SIG_SETMASK, [], [pid 6572] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6567] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 3 [pid 6574] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6575 attached [pid 6574] creat("./file1", 000 [pid 6572] <... futex resumed>) = 0 [pid 6567] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6571] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6575] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6572] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6569] <... clone3 resumed> => {parent_tid=[6575]}, 88) = 6575 [pid 6567] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6561] exit_group(0 [pid 6571] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5065] close(3 [pid 6575] <... rseq resumed>) = 0 [pid 6573] <... write resumed>) = 524288 [pid 6572] <... futex resumed>) = ? [pid 6571] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6569] rt_sigprocmask(SIG_SETMASK, [], [pid 6567] <... futex resumed>) = ? [pid 6561] <... exit_group resumed>) = ? [pid 5065] <... close resumed>) = 0 [pid 6572] +++ exited with 0 +++ [pid 6571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6567] +++ exited with 0 +++ [pid 6571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6569] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 149.059393][ T6567] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.080414][ T6567] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.101376][ T6568] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6576 attached [pid 6575] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6573] munmap(0x7efd74b1c000, 138412032 [pid 6571] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6569] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6561] +++ exited with 0 +++ [pid 6576] set_robust_list(0x555555fbc6a0, 24 [pid 6571] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6569] <... futex resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6576 [pid 6576] <... set_robust_list resumed>) = 0 [pid 6575] <... set_robust_list resumed>) = 0 [pid 6573] <... munmap resumed>) = 0 [pid 6571] <... mprotect resumed>) = 0 [pid 6569] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6576] chdir("./82" [pid 6575] rt_sigprocmask(SIG_SETMASK, [], [pid 6573] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6571] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6561, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 6576] <... chdir resumed>) = 0 [pid 6575] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6573] <... openat resumed>) = 4 [pid 6571] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 6576] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6575] memfd_create("syzkaller", 0 [pid 6573] ioctl(4, LOOP_SET_FD, 3 [pid 6571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] <... restart_syscall resumed>) = 0 [pid 6576] <... prctl resumed>) = 0 [pid 6575] <... memfd_create resumed>) = 3 [pid 6575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6576] setpgid(0, 0 [pid 6571] <... clone3 resumed> => {parent_tid=[6577]}, 88) = 6577 [pid 5068] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6576] <... setpgid resumed>) = 0 [pid 6571] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6571] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6577 attached [pid 6576] <... openat resumed>) = 3 [pid 6571] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 3 [pid 6577] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6576] write(3, "1000", 4 [pid 6573] <... ioctl resumed>) = 0 [pid 6571] <... futex resumed>) = 0 [pid 6566] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] newfstatat(3, "", [pid 6577] <... rseq resumed>) = 0 [pid 6576] <... write resumed>) = 4 [pid 6573] close(3 [pid 6571] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6577] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6576] close(3 [pid 6577] <... set_robust_list resumed>) = 0 [pid 6577] rt_sigprocmask(SIG_SETMASK, [], [pid 6576] <... close resumed>) = 0 [pid 6577] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6576] symlink("/dev/binderfs", "./binderfs" [pid 6577] memfd_create("syzkaller", 0 [pid 5068] getdents64(3, [pid 6577] <... memfd_create resumed>) = 3 [pid 6576] <... symlink resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6576] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] <... close resumed>) = 0 [pid 6576] <... futex resumed>) = 0 [pid 6577] <... mmap resumed>) = 0x7efd74b1c000 [pid 6573] mkdir("./bus", 0777 [pid 5068] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6576] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6573] <... mkdir resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6573] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6575] <... write resumed>) = 524288 [pid 6575] munmap(0x7efd74b1c000, 138412032) = 0 [ 149.143985][ T6568] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.158444][ T6573] loop2: detected capacity change from 0 to 1024 [ 149.180082][ T6568] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6575] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6575] <... openat resumed>) = 4 [pid 6576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6575] ioctl(4, LOOP_SET_FD, 3 [pid 6576] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6573] <... mount resumed>) = 0 [pid 6576] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6573] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6576] <... mprotect resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6573] <... openat resumed>) = 3 [pid 6576] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6578 attached [pid 6578] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6576] <... clone3 resumed> => {parent_tid=[6578]}, 88) = 6578 [pid 6574] <... creat resumed>) = 5 [pid 6573] chdir("./bus" [pid 6574] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... rseq resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_SETMASK, [], [pid 6574] <... futex resumed>) = 0 [pid 6573] <... chdir resumed>) = 0 [pid 6574] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6578] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6573] ioctl(4, LOOP_CLR_FD [pid 6578] <... set_robust_list resumed>) = 0 [pid 6576] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] rt_sigprocmask(SIG_SETMASK, [], [pid 6576] <... futex resumed>) = 0 [pid 6573] <... ioctl resumed>) = 0 [pid 6578] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6576] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6573] close(4 [pid 6578] memfd_create("syzkaller", 0 [pid 6573] <... close resumed>) = 0 [pid 6575] <... ioctl resumed>) = 0 [pid 6575] close(3) = 0 [pid 6575] mkdir("./bus", 0777) = 0 [pid 6573] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6575] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6573] <... futex resumed>) = 1 [pid 6570] <... futex resumed>) = 0 [pid 6570] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6573] creat("./bus", 000 [ 149.196200][ T47] hfsplus: b-tree write err: -5, ino 4 [ 149.203986][ T6575] loop5: detected capacity change from 0 to 1024 [ 149.223309][ T6568] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6570] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... memfd_create resumed>) = 3 [pid 6577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6573] <... creat resumed>) = 4 [pid 5068] <... umount2 resumed>) = 0 [pid 6578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6573] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6578] <... mmap resumed>) = 0x7efd74b1c000 [pid 6573] <... futex resumed>) = 1 [pid 6570] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6570] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] newfstatat(AT_FDCWD, "./83/bus", [pid 6570] <... futex resumed>) = 0 [pid 6570] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6573] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5068] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6575] <... mount resumed>) = 0 [pid 6575] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6575] chdir("./bus" [pid 5068] newfstatat(4, "", [pid 6575] <... chdir resumed>) = 0 [pid 6575] ioctl(4, LOOP_CLR_FD) = 0 [pid 6568] <... write resumed>) = 57344 [pid 6575] close(4) = 0 [pid 6568] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6575] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6568] <... futex resumed>) = 0 [pid 6575] <... futex resumed>) = 1 [ 149.243177][ T6568] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6566] exit_group(0 [pid 6575] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6574] <... futex resumed>) = ? [pid 6566] <... exit_group resumed>) = ? [pid 6574] +++ exited with 0 +++ [pid 6569] <... futex resumed>) = 0 [pid 6568] +++ exited with 0 +++ [pid 6566] +++ exited with 0 +++ [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6569] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6566, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6575] <... futex resumed>) = 0 [pid 6569] <... futex resumed>) = 1 [pid 5068] getdents64(4, [pid 6575] creat("./bus", 000 [pid 6569] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6575] <... creat resumed>) = 4 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 6575] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] close(4 [pid 6575] <... futex resumed>) = 1 [pid 6569] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... close resumed>) = 0 [pid 6577] <... write resumed>) = 524288 [pid 6575] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6569] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(3, "", [pid 5068] rmdir("./83/bus" [pid 6575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6569] <... futex resumed>) = 0 [pid 6575] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6569] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... rmdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5068] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6578] <... write resumed>) = 524288 [pid 6577] munmap(0x7efd74b1c000, 138412032 [pid 6570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./83/binderfs", [pid 6570] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6570] <... futex resumed>) = 0 [pid 5068] unlink("./83/binderfs" [pid 6570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6578] munmap(0x7efd74b1c000, 138412032 [pid 6577] <... munmap resumed>) = 0 [pid 6570] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... unlink resumed>) = 0 [pid 6578] <... munmap resumed>) = 0 [pid 6577] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6570] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] getdents64(3, [pid 6578] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 6578] <... openat resumed>) = 4 [pid 6577] <... openat resumed>) = 4 [pid 6570] <... mprotect resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./83" [ 149.266697][ T6573] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.296371][ T6575] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.306900][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6577] ioctl(4, LOOP_SET_FD, 3 [pid 6570] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... rmdir resumed>) = 0 [pid 6570] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6579]}, 88) = 6579 [pid 6570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6570] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6570] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6579 attached [pid 6579] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6579] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5068] mkdir("./84", 0777 [pid 6579] <... set_robust_list resumed>) = 0 [pid 6579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... mkdir resumed>) = 0 [pid 6579] creat("./file1", 000 [pid 6578] ioctl(4, LOOP_SET_FD, 3 [pid 6569] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6577] <... ioctl resumed>) = 0 [pid 6577] close(3 [pid 6569] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6569] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6569] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6569] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6577] <... close resumed>) = 0 [pid 6569] <... clone3 resumed> => {parent_tid=[6580]}, 88) = 6580 [pid 5068] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6580 attached [pid 6577] mkdir("./bus", 0777 [pid 6569] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6580] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6569] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6580] <... rseq resumed>) = 0 [pid 6569] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] <... mkdir resumed>) = 0 [pid 5068] close(3 [pid 6580] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6569] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6580] <... set_robust_list resumed>) = 0 [pid 6569] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6580] creat("./file1", 000./strace-static-x86_64: Process 6581 attached [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6581 [ 149.314700][ T6573] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.326020][ T6577] loop1: detected capacity change from 0 to 1024 [ 149.334003][ T6575] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.342951][ T6573] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.351992][ T6578] loop0: detected capacity change from 0 to 1024 [ 149.357293][ T6573] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6581] set_robust_list(0x555555fbc6a0, 24 [pid 6577] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6570] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6581] <... set_robust_list resumed>) = 0 [pid 6578] <... ioctl resumed>) = 0 [pid 6581] chdir("./84" [pid 6578] close(3) = 0 [pid 6578] mkdir("./bus", 0777) = 0 [pid 6581] <... chdir resumed>) = 0 [pid 6579] <... creat resumed>) = 5 [pid 6581] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6578] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6581] <... prctl resumed>) = 0 [pid 6581] setpgid(0, 0) = 0 [pid 6579] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6581] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6579] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6578] <... mount resumed>) = 0 [pid 6577] <... mount resumed>) = 0 [pid 6569] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... umount2 resumed>) = 0 [pid 6578] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6581] <... openat resumed>) = 3 [pid 6577] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6577] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6577] chdir("./bus" [pid 5069] newfstatat(AT_FDCWD, "./82/bus", [pid 6578] <... openat resumed>) = 3 [pid 6578] chdir("./bus" [pid 6577] <... chdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6581] write(3, "1000", 4 [pid 6578] <... chdir resumed>) = 0 [pid 6577] ioctl(4, LOOP_CLR_FD [pid 5069] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6581] <... write resumed>) = 4 [pid 6578] ioctl(4, LOOP_CLR_FD [pid 6577] <... ioctl resumed>) = 0 [pid 6581] close(3 [pid 6578] <... ioctl resumed>) = 0 [pid 6577] close(4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] <... close resumed>) = 0 [pid 6580] <... creat resumed>) = 5 [pid 6578] close(4 [pid 6577] <... close resumed>) = 0 [ 149.375246][ T6575] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.397605][ T6573] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.407119][ T6575] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.414995][ T6573] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6581] symlink("/dev/binderfs", "./binderfs" [pid 6580] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... close resumed>) = 0 [pid 6577] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 6580] <... futex resumed>) = 0 [pid 6577] <... futex resumed>) = 1 [pid 6571] <... futex resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 6581] <... symlink resumed>) = 0 [pid 6580] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6578] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6581] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... futex resumed>) = 1 [pid 6576] <... futex resumed>) = 0 [pid 6571] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6581] <... futex resumed>) = 0 [pid 6578] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6576] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] <... futex resumed>) = 0 [pid 5069] getdents64(4, [pid 6581] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6577] creat("./bus", 000 [pid 6576] <... futex resumed>) = 0 [pid 6571] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6581] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6577] <... creat resumed>) = 4 [pid 6576] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6573] <... write resumed>) = 57344 [pid 5069] getdents64(4, [pid 6581] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6578] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6577] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6577] <... futex resumed>) = 1 [pid 6571] <... futex resumed>) = 0 [pid 5069] close(4 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6577] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6571] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 6581] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6571] <... futex resumed>) = 0 [pid 5069] rmdir("./82/bus" [pid 6578] creat("./bus", 000 [pid 6577] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6571] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6573] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... rmdir resumed>) = 0 [pid 6578] <... creat resumed>) = 4 [pid 6573] <... futex resumed>) = 0 [pid 6573] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6570] exit_group(0 [pid 6581] <... mprotect resumed>) = 0 [pid 6579] <... futex resumed>) = ? [pid 6573] <... futex resumed>) = ? [pid 6570] <... exit_group resumed>) = ? [pid 5069] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6579] +++ exited with 0 +++ [pid 6578] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6573] +++ exited with 0 +++ [pid 6570] +++ exited with 0 +++ [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6570, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6578] <... futex resumed>) = 1 [pid 6576] <... futex resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] <... clone3 resumed> => {parent_tid=[6582]}, 88) = 6582 [pid 6578] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6576] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6582 attached [pid 6581] rt_sigprocmask(SIG_SETMASK, [], [pid 6576] <... futex resumed>) = 0 [pid 5069] unlink("./82/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 6582] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6576] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 6582] <... rseq resumed>) = 0 [pid 6581] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(3, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6582] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6581] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 6582] <... set_robust_list resumed>) = 0 [pid 6581] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] close(3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6582] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... close resumed>) = 0 [ 149.432754][ T6575] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.440873][ T6575] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6575] <... write resumed>) = 57344 [pid 6575] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6569] exit_group(0 [pid 6580] <... futex resumed>) = ? [pid 6569] <... exit_group resumed>) = ? [pid 6580] +++ exited with 0 +++ [pid 6575] <... futex resumed>) = ? [pid 5069] rmdir("./82" [pid 6575] +++ exited with 0 +++ [pid 6569] +++ exited with 0 +++ [pid 6582] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6569, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5069] <... rmdir resumed>) = 0 [pid 6582] memfd_create("syzkaller", 0 [pid 5069] mkdir("./83", 0777 [pid 6571] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... mkdir resumed>) = 0 [pid 6571] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] <... memfd_create resumed>) = 3 [pid 6582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6571] <... futex resumed>) = 0 [pid 5070] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [ 149.486994][ T6578] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.492732][ T6577] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.502729][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 149.521901][ T6577] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6571] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6582] <... mmap resumed>) = 0x7efd74b1c000 [pid 6576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6571] <... mprotect resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... openat resumed>) = 3 [pid 6582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6576] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6571] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6571] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6576] <... futex resumed>) = 0 [pid 6576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6571] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... openat resumed>) = 3 [pid 5069] close(3 [pid 6576] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] newfstatat(3, "", [pid 5069] <... close resumed>) = 0 [pid 6571] <... clone3 resumed> => {parent_tid=[6583]}, 88) = 6583 [pid 6576] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6576] <... mprotect resumed>) = 0 [pid 6571] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5067] <... umount2 resumed>) = 0 [pid 6576] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6584 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6571] <... futex resumed>) = 0 [pid 6576] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6583 attached [pid 6576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6571] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6584 attached [pid 6583] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 149.532290][ T6578] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.539903][ T6578] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.542491][ T6577] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] newfstatat(4, "", [pid 6584] set_robust_list(0x555555fbc6a0, 24 [pid 6583] <... rseq resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6576] <... clone3 resumed> => {parent_tid=[6585]}, 88) = 6585 [pid 5067] getdents64(4, [pid 6576] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6576] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] getdents64(4, [pid 6576] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6576] <... futex resumed>) = 0 [pid 5067] close(4./strace-static-x86_64: Process 6585 attached [pid 6576] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... close resumed>) = 0 [pid 6585] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6584] <... set_robust_list resumed>) = 0 [pid 6583] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5067] rmdir("./81/bus" [pid 6585] <... rseq resumed>) = 0 [pid 6584] chdir("./83" [pid 6583] <... set_robust_list resumed>) = 0 [pid 6582] <... write resumed>) = 524288 [pid 5067] <... rmdir resumed>) = 0 [pid 6584] <... chdir resumed>) = 0 [pid 6583] rt_sigprocmask(SIG_SETMASK, [], [pid 6582] munmap(0x7efd74b1c000, 138412032 [pid 6583] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 149.588834][ T47] hfsplus: b-tree write err: -5, ino 4 [ 149.601363][ T6577] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6585] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6583] creat("./file1", 000 [pid 6582] <... munmap resumed>) = 0 [pid 5067] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./81/binderfs", [pid 6585] <... set_robust_list resumed>) = 0 [pid 6583] <... creat resumed>) = 5 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6585] rt_sigprocmask(SIG_SETMASK, [], [pid 6584] <... prctl resumed>) = 0 [pid 6583] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] unlink("./81/binderfs" [pid 6584] setpgid(0, 0 [pid 6583] <... futex resumed>) = 1 [pid 6582] <... openat resumed>) = 4 [pid 6571] <... futex resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6584] <... setpgid resumed>) = 0 [pid 6583] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6582] ioctl(4, LOOP_SET_FD, 3 [pid 6585] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./81" [pid 6585] creat("./file1", 000 [pid 6576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... rmdir resumed>) = 0 [pid 6584] <... openat resumed>) = 3 [pid 5067] mkdir("./82", 0777 [pid 6584] write(3, "1000", 4) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 6584] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6584] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6584] <... symlink resumed>) = 0 [pid 6584] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] <... ioctl resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 6582] close(3 [pid 5067] <... close resumed>) = 0 [pid 6584] <... futex resumed>) = 0 [pid 6582] <... close resumed>) = 0 [pid 6584] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6582] mkdir("./bus", 0777 [pid 6584] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5070] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6585] <... creat resumed>) = 5 [pid 6584] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6582] <... mkdir resumed>) = 0 [ 149.630476][ T6578] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.641229][ T6582] loop3: detected capacity change from 0 to 1024 [ 149.649010][ T6577] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6586 attached [pid 6585] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6586 [pid 6586] set_robust_list(0x555555fbc6a0, 24 [pid 6585] <... futex resumed>) = 0 [pid 6586] <... set_robust_list resumed>) = 0 [pid 6585] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6586] chdir("./82") = 0 [pid 6586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6586] setpgid(0, 0) = 0 [pid 6584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6586] <... openat resumed>) = 3 [pid 6584] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6586] write(3, "1000", 4 [pid 6584] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] newfstatat(AT_FDCWD, "./83/bus", [pid 6586] <... write resumed>) = 4 [pid 6582] <... mount resumed>) = 0 [pid 6584] <... mprotect resumed>) = 0 [pid 6586] close(3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6586] <... close resumed>) = 0 [pid 6584] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6582] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6586] symlink("/dev/binderfs", "./binderfs" [pid 6584] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6582] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6586] <... symlink resumed>) = 0 [pid 6584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6582] chdir("./bus" [pid 5070] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6586] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6586] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6582] <... chdir resumed>) = 0 [pid 5070] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6587 attached [pid 6584] <... clone3 resumed> => {parent_tid=[6587]}, 88) = 6587 [pid 6582] ioctl(4, LOOP_CLR_FD [pid 5070] newfstatat(4, "", [pid 6584] rt_sigprocmask(SIG_SETMASK, [], [pid 6582] <... ioctl resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] close(4 [pid 6584] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] <... close resumed>) = 0 [pid 6584] <... futex resumed>) = 0 [pid 6582] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(4, [pid 6584] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6582] <... futex resumed>) = 1 [pid 6581] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6587] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6586] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6582] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] <... write resumed>) = 57344 [pid 6577] <... write resumed>) = 57344 [pid 5070] getdents64(4, [pid 6587] <... rseq resumed>) = 0 [pid 6586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6581] <... futex resumed>) = 0 [pid 6578] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6577] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6576] exit_group(0 [pid 6571] exit_group(0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6587] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] creat("./bus", 000 [pid 6581] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6578] <... futex resumed>) = 0 [pid 6571] <... exit_group resumed>) = ? [pid 6583] <... futex resumed>) = ? [pid 5070] close(4 [pid 6587] <... set_robust_list resumed>) = 0 [pid 6586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6583] +++ exited with 0 +++ [pid 6577] <... futex resumed>) = ? [pid 6587] rt_sigprocmask(SIG_SETMASK, [], [pid 6586] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6582] <... creat resumed>) = 4 [pid 6577] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 6587] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6585] <... futex resumed>) = ? [pid 6576] <... exit_group resumed>) = ? [pid 5070] rmdir("./83/bus" [pid 6587] memfd_create("syzkaller", 0 [pid 6586] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6585] +++ exited with 0 +++ [pid 6587] <... memfd_create resumed>) = 3 [pid 6586] <... mprotect resumed>) = 0 [pid 6587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6586] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6587] <... mmap resumed>) = 0x7efd74b1c000 [pid 6587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6586] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6582] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6578] +++ exited with 0 +++ [pid 6576] +++ exited with 0 +++ [pid 6571] +++ exited with 0 +++ [pid 5070] <... rmdir resumed>) = 0 [pid 6586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6582] <... futex resumed>) = 1 [pid 6581] <... futex resumed>) = 0 [pid 5070] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6582] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6571, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- ./strace-static-x86_64: Process 6588 attached [pid 6586] <... clone3 resumed> => {parent_tid=[6588]}, 88) = 6588 [pid 6582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6581] <... futex resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./83/binderfs", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6576, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6586] rt_sigprocmask(SIG_SETMASK, [], [ 149.680457][ T6578] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.682610][ T6577] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.716549][ T6578] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6582] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6581] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6588] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] unlink("./83/binderfs" [pid 6586] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6586] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6586] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 5066] newfstatat(3, "", [pid 5065] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] newfstatat(3, "", [pid 6588] <... rseq resumed>) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6587] <... write resumed>) = 524288 [pid 6588] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5070] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6588] <... set_robust_list resumed>) = 0 [pid 5065] getdents64(3, [pid 6588] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6588] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6588] memfd_create("syzkaller", 0 [pid 6587] munmap(0x7efd74b1c000, 138412032 [pid 6588] <... memfd_create resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6588] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6587] <... munmap resumed>) = 0 [pid 5070] close(3 [pid 6588] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] <... close resumed>) = 0 [pid 5070] rmdir("./83" [pid 6581] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6581] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6588] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6581] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [ 149.777302][ T6582] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.785854][ T47] hfsplus: b-tree write err: -5, ino 4 [ 149.788410][ T6582] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.812302][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6587] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5070] mkdir("./84", 0777) = 0 [pid 6587] ioctl(4, LOOP_SET_FD, 3 [pid 6581] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 6581] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6588] <... write resumed>) = 524288 [pid 6581] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] close(3 [pid 5066] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 6581] <... mprotect resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6581] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] newfstatat(AT_FDCWD, "./83/bus", [pid 6581] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6581] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./83/bus") = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6589 [pid 5066] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] unlink("./83/binderfs") = 0 ./strace-static-x86_64: Process 6590 attached [pid 6588] munmap(0x7efd74b1c000, 138412032 [pid 5066] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./83"./strace-static-x86_64: Process 6589 attached ) = 0 [ 149.831595][ T6582] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.834055][ T6587] loop4: detected capacity change from 0 to 1024 [ 149.863017][ T6582] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] mkdir("./84", 0777 [pid 6589] set_robust_list(0x555555fbc6a0, 24 [pid 5066] <... mkdir resumed>) = 0 [pid 6589] <... set_robust_list resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6588] <... munmap resumed>) = 0 [pid 6581] <... clone3 resumed> => {parent_tid=[6590]}, 88) = 6590 [pid 6590] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6588] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6590] <... rseq resumed>) = 0 [pid 6581] rt_sigprocmask(SIG_SETMASK, [], [pid 6590] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6589] chdir("./84" [pid 6588] <... openat resumed>) = 4 [pid 6581] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6589] <... chdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6589] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6589] <... prctl resumed>) = 0 [pid 6587] <... ioctl resumed>) = 0 [pid 5066] close(3 [pid 6589] setpgid(0, 0 [pid 6587] close(3 [pid 5066] <... close resumed>) = 0 [pid 6589] <... setpgid resumed>) = 0 [pid 6587] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6587] mkdir("./bus", 0777) = 0 [pid 6581] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(AT_FDCWD, "./82/bus", [pid 6590] <... set_robust_list resumed>) = 0 [pid 6588] ioctl(4, LOOP_SET_FD, 3 [pid 6581] <... futex resumed>) = 0 [pid 6581] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6590] rt_sigprocmask(SIG_SETMASK, [], [pid 6589] <... openat resumed>) = 3 [pid 6587] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6590] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6582] <... write resumed>) = 57344 [pid 6590] creat("./file1", 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6591 attached [pid 6590] <... creat resumed>) = 5 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6591 [pid 6582] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6590] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6582] <... futex resumed>) = 0 [pid 6591] set_robust_list(0x555555fbc6a0, 24 [pid 6590] <... futex resumed>) = 1 [pid 6589] write(3, "1000", 4 [pid 6588] <... ioctl resumed>) = 0 [pid 6582] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6581] <... futex resumed>) = 0 [pid 6587] <... mount resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6591] <... set_robust_list resumed>) = 0 [pid 6590] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6589] <... write resumed>) = 4 [pid 6588] close(3 [pid 6587] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6581] exit_group(0 [pid 5065] newfstatat(4, "", [pid 6591] chdir("./84" [pid 6590] <... futex resumed>) = ? [pid 6589] close(3 [pid 6587] <... openat resumed>) = 3 [pid 6582] <... futex resumed>) = ? [pid 6581] <... exit_group resumed>) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6591] <... chdir resumed>) = 0 [pid 6590] +++ exited with 0 +++ [pid 6589] <... close resumed>) = 0 [pid 6587] chdir("./bus" [pid 6582] +++ exited with 0 +++ [pid 6581] +++ exited with 0 +++ [pid 5065] getdents64(4, [pid 6591] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6589] symlink("/dev/binderfs", "./binderfs" [pid 6587] <... chdir resumed>) = 0 [pid 6591] <... prctl resumed>) = 0 [pid 6589] <... symlink resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6581, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6591] setpgid(0, 0 [pid 6587] ioctl(4, LOOP_CLR_FD [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6591] <... setpgid resumed>) = 0 [pid 6589] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6588] <... close resumed>) = 0 [pid 6587] <... ioctl resumed>) = 0 [pid 5068] <... restart_syscall resumed>) = 0 [pid 5065] getdents64(4, [pid 6591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6589] <... futex resumed>) = 0 [pid 6588] mkdir("./bus", 0777 [pid 6587] close(4 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6591] <... openat resumed>) = 3 [pid 6589] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6591] write(3, "1000", 4 [pid 6589] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6587] <... close resumed>) = 0 [pid 5065] close(4 [pid 6591] <... write resumed>) = 4 [pid 6589] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6587] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6591] close(3 [pid 6589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] <... mkdir resumed>) = 0 [pid 6584] <... futex resumed>) = 0 [pid 6587] <... futex resumed>) = 1 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 6591] <... close resumed>) = 0 [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6584] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] rmdir("./82/bus" [pid 6591] symlink("/dev/binderfs", "./binderfs" [pid 6589] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6588] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6587] creat("./bus", 000 [pid 6584] <... futex resumed>) = 0 [pid 6591] <... symlink resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 6591] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6591] <... futex resumed>) = 0 [pid 6587] <... creat resumed>) = 4 [pid 6584] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] newfstatat(3, "", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6591] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6589] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6587] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6591] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6589] <... mprotect resumed>) = 0 [pid 6588] <... mount resumed>) = 0 [pid 6587] <... futex resumed>) = 0 [pid 6584] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(3, [pid 5065] newfstatat(AT_FDCWD, "./82/binderfs", [pid 6588] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6587] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6584] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6584] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6588] <... openat resumed>) = 3 [pid 5065] unlink("./82/binderfs" [pid 6588] chdir("./bus" [pid 5068] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6591] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6588] <... chdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] ioctl(4, LOOP_CLR_FD [pid 5065] getdents64(3, [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6588] <... ioctl resumed>) = 0 [ 149.888141][ T6582] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.901487][ T6582] hfsplus: request for non-existent node 16715520 in B*Tree [ 149.909707][ T6588] loop2: detected capacity change from 0 to 1024 [pid 6591] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6588] close(4 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6591] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6591] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6589] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6591] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6589] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6591] <... clone3 resumed> => {parent_tid=[6592]}, 88) = 6592 [pid 6589] <... clone3 resumed> => {parent_tid=[6593]}, 88) = 6593 [pid 6591] rt_sigprocmask(SIG_SETMASK, [], [pid 6589] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6593 attached ./strace-static-x86_64: Process 6592 attached [pid 6591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] <... close resumed>) = 0 [pid 5065] close(3 [pid 6592] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6588] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] <... rseq resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6588] <... futex resumed>) = 1 [pid 6588] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] rmdir("./82" [pid 6592] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6589] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] <... futex resumed>) = 0 [pid 6589] <... futex resumed>) = 0 [pid 6586] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6592] rt_sigprocmask(SIG_SETMASK, [], [pid 6588] <... futex resumed>) = 0 [pid 6586] <... futex resumed>) = 1 [pid 5065] <... rmdir resumed>) = 0 [pid 6592] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6588] creat("./bus", 000 [pid 6586] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6591] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6592] memfd_create("syzkaller", 0 [pid 6588] <... creat resumed>) = 4 [pid 6592] <... memfd_create resumed>) = 3 [pid 6588] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6588] <... futex resumed>) = 1 [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] <... mmap resumed>) = 0x7efd74b1c000 [pid 6588] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6593] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] mkdir("./83", 0777 [pid 6593] <... rseq resumed>) = 0 [pid 6593] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6593] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6593] memfd_create("syzkaller", 0) = 3 [pid 6593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5065] <... mkdir resumed>) = 0 [pid 6584] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 149.976007][ T58] hfsplus: b-tree write err: -5, ino 4 [ 150.000065][ T6587] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.008912][ T6588] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6584] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6584] <... futex resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6586] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6586] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6593] <... write resumed>) = 524288 [pid 6592] <... write resumed>) = 524288 [pid 6586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6586] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6586] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6586] <... mprotect resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./84/bus", [pid 6586] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6586] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6586] <... clone3 resumed> => {parent_tid=[6594]}, 88) = 6594 [pid 6586] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6586] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6586] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] newfstatat(4, "", [pid 6586] <... futex resumed>) = 0 [pid 6586] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6584] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] close(3 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 ./strace-static-x86_64: Process 6594 attached [pid 6594] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6584] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] rmdir("./84/bus" [pid 5065] <... close resumed>) = 0 [pid 6584] <... mprotect resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6584] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6594] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 6595 attached [pid 6594] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6584] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6595] set_robust_list(0x555555fbc6a0, 24 [pid 6594] <... set_robust_list resumed>) = 0 [pid 6584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6592] munmap(0x7efd74b1c000, 138412032 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6595 [pid 6594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6596 attached [pid 6595] <... set_robust_list resumed>) = 0 [pid 6594] creat("./file1", 000 [pid 6592] <... munmap resumed>) = 0 [pid 6584] <... clone3 resumed> => {parent_tid=[6596]}, 88) = 6596 [pid 6596] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6595] chdir("./83" [pid 6593] munmap(0x7efd74b1c000, 138412032 [pid 5068] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6595] <... chdir resumed>) = 0 [pid 6596] <... rseq resumed>) = 0 [pid 6596] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6595] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6593] <... munmap resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6596] <... set_robust_list resumed>) = 0 [pid 6593] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] newfstatat(AT_FDCWD, "./84/binderfs", [pid 6593] <... openat resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 150.029836][ T6587] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.051405][ T6588] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.059539][ T6588] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.062284][ T6587] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6593] ioctl(4, LOOP_SET_FD, 3 [pid 5068] unlink("./84/binderfs" [pid 6596] rt_sigprocmask(SIG_SETMASK, [], [pid 6595] <... prctl resumed>) = 0 [pid 6592] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6584] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... unlink resumed>) = 0 [pid 6596] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] setpgid(0, 0 [pid 6596] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6592] <... openat resumed>) = 4 [pid 6595] <... setpgid resumed>) = 0 [pid 6592] ioctl(4, LOOP_SET_FD, 3 [pid 6584] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6594] <... creat resumed>) = 5 [pid 6586] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6584] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./84") = 0 [pid 6594] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] <... futex resumed>) = 0 [pid 6584] <... futex resumed>) = 1 [pid 5068] mkdir("./85", 0777 [pid 6596] creat("./file1", 000 [pid 6595] <... openat resumed>) = 3 [pid 6594] <... futex resumed>) = 0 [pid 6584] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... mkdir resumed>) = 0 [pid 6595] write(3, "1000", 4 [pid 6594] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6595] <... write resumed>) = 4 [pid 6593] <... ioctl resumed>) = 0 [pid 6592] <... ioctl resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6595] close(3 [pid 6593] close(3 [pid 6592] close(3 [pid 6595] <... close resumed>) = 0 [pid 6593] <... close resumed>) = 0 [pid 6592] <... close resumed>) = 0 [pid 6595] symlink("/dev/binderfs", "./binderfs" [pid 6593] mkdir("./bus", 0777 [ 150.093232][ T6588] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.097677][ T6593] loop5: detected capacity change from 0 to 1024 [ 150.111105][ T6592] loop1: detected capacity change from 0 to 1024 [ 150.119505][ T6588] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.134498][ T6587] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6592] mkdir("./bus", 0777 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6595] <... symlink resumed>) = 0 [pid 6593] <... mkdir resumed>) = 0 [pid 6592] <... mkdir resumed>) = 0 [pid 6588] <... write resumed>) = 57344 [pid 6595] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6596] <... creat resumed>) = 5 [pid 6595] <... futex resumed>) = 0 [pid 6593] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6588] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6586] exit_group(0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6596] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6594] <... futex resumed>) = ? [pid 6588] <... futex resumed>) = ? [pid 6586] <... exit_group resumed>) = ? [pid 5068] close(3 [pid 6596] <... futex resumed>) = 1 [pid 6595] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6588] +++ exited with 0 +++ [pid 6584] <... futex resumed>) = 0 [pid 6594] +++ exited with 0 +++ [pid 6586] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 6596] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6595] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6586, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6595] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6595] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6597 [pid 5067] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6592] <... mount resumed>) = 0 [pid 6595] <... clone3 resumed> => {parent_tid=[6598]}, 88) = 6598 [pid 6592] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6598 attached ./strace-static-x86_64: Process 6597 attached [pid 6595] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6598] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6597] set_robust_list(0x555555fbc6a0, 24 [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6592] <... openat resumed>) = 3 [pid 6598] <... rseq resumed>) = 0 [pid 6597] <... set_robust_list resumed>) = 0 [pid 6595] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] chdir("./bus" [pid 5067] <... openat resumed>) = 3 [pid 6598] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6597] chdir("./85" [pid 6595] <... futex resumed>) = 0 [pid 6592] <... chdir resumed>) = 0 [pid 6598] <... set_robust_list resumed>) = 0 [pid 6597] <... chdir resumed>) = 0 [pid 6595] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6598] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6598] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6597] <... prctl resumed>) = 0 [pid 6598] memfd_create("syzkaller", 0 [pid 6597] setpgid(0, 0 [pid 6598] <... memfd_create resumed>) = 3 [pid 6597] <... setpgid resumed>) = 0 [pid 6598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6598] <... mmap resumed>) = 0x7efd74b1c000 [pid 6597] <... openat resumed>) = 3 [pid 6598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6597] write(3, "1000", 4 [pid 6593] <... mount resumed>) = 0 [pid 6592] ioctl(4, LOOP_CLR_FD [pid 5067] newfstatat(3, "", [pid 6597] <... write resumed>) = 4 [pid 6592] <... ioctl resumed>) = 0 [ 150.142011][ T6588] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.180748][ T6587] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6593] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6592] close(4 [pid 6587] <... write resumed>) = 57344 [pid 5067] getdents64(3, [pid 6597] close(3 [pid 6593] <... openat resumed>) = 3 [pid 6592] <... close resumed>) = 0 [pid 6587] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... close resumed>) = 0 [pid 6592] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6587] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6597] symlink("/dev/binderfs", "./binderfs" [pid 6593] chdir("./bus" [pid 6592] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6587] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6598] <... write resumed>) = 524288 [pid 6597] <... symlink resumed>) = 0 [pid 6593] <... chdir resumed>) = 0 [pid 6592] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6591] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6584] exit_group(0 [pid 6597] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6596] <... futex resumed>) = ? [pid 6592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6591] <... futex resumed>) = 0 [pid 6587] <... futex resumed>) = ? [pid 6584] <... exit_group resumed>) = ? [pid 6597] <... futex resumed>) = 0 [pid 6596] +++ exited with 0 +++ [pid 6587] +++ exited with 0 +++ [pid 6584] +++ exited with 0 +++ [pid 6597] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6584, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6597] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6597] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5069] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6597] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5069] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6592] creat("./bus", 000 [pid 6591] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... openat resumed>) = 3 [pid 6597] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6593] ioctl(4, LOOP_CLR_FD [pid 5069] newfstatat(3, "", [pid 6597] <... mprotect resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6597] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6593] <... ioctl resumed>) = 0 [pid 6592] <... creat resumed>) = 4 [pid 5069] getdents64(3, [pid 6593] close(4 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6597] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6593] <... close resumed>) = 0 [pid 5069] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6598] munmap(0x7efd74b1c000, 138412032 [pid 6597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6593] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6599 attached [pid 6593] <... futex resumed>) = 1 [pid 6592] <... futex resumed>) = 1 [pid 6591] <... futex resumed>) = 0 [pid 6589] <... futex resumed>) = 0 [pid 6591] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] <... futex resumed>) = 0 [pid 6589] <... futex resumed>) = 0 [pid 6591] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6589] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6598] <... munmap resumed>) = 0 [pid 6598] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6593] creat("./bus", 000 [pid 6592] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6599] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6597] <... clone3 resumed> => {parent_tid=[6599]}, 88) = 6599 [pid 6599] <... rseq resumed>) = 0 [pid 6597] rt_sigprocmask(SIG_SETMASK, [], [pid 6599] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6599] <... set_robust_list resumed>) = 0 [pid 6597] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6593] <... creat resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6599] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] <... futex resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./83/bus", [pid 6599] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6597] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6599] memfd_create("syzkaller", 0 [pid 5067] <... umount2 resumed>) = 0 [pid 6599] <... memfd_create resumed>) = 3 [pid 5069] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6599] <... mmap resumed>) = 0x7efd74b1c000 [pid 5067] newfstatat(AT_FDCWD, "./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 150.192733][ T6587] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.218442][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 150.228474][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 5067] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6593] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6598] <... openat resumed>) = 4 [pid 6589] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6598] ioctl(4, LOOP_SET_FD, 3 [pid 5069] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(4, [pid 5069] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6593] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6589] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(4, "", [pid 5067] getdents64(4, [pid 6593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6589] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6593] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6589] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(4, [pid 5067] close(4 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] <... close resumed>) = 0 [pid 6599] <... write resumed>) = 524288 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./83/bus") = 0 [pid 5069] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] rmdir("./82/bus" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./83/binderfs") = 0 [pid 5067] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./82/binderfs", [pid 5069] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] unlink("./82/binderfs" [pid 6598] <... ioctl resumed>) = 0 [pid 5069] rmdir("./83" [pid 5067] <... unlink resumed>) = 0 [pid 6598] close(3 [pid 6591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 6598] <... close resumed>) = 0 [pid 6591] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6598] mkdir("./bus", 0777 [pid 6591] <... futex resumed>) = 0 [pid 5067] close(3 [pid 6598] <... mkdir resumed>) = 0 [pid 5069] mkdir("./84", 0777 [pid 5067] <... close resumed>) = 0 [pid 6598] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... mkdir resumed>) = 0 [pid 5067] rmdir("./82" [ 150.259134][ T6592] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.272728][ T6598] loop0: detected capacity change from 0 to 1024 [ 150.293646][ T6593] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6591] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6599] munmap(0x7efd74b1c000, 138412032 [pid 6591] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] mkdir("./83", 0777 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... mkdir resumed>) = 0 [pid 6598] <... mount resumed>) = 0 [pid 6591] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6599] <... munmap resumed>) = 0 [pid 6591] <... mprotect resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6598] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6598] chdir("./bus" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6598] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6598] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 6598] <... ioctl resumed>) = 0 [pid 6591] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6599] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6591] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6591] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6599] <... openat resumed>) = 4 [pid 6598] close(4) = 0 [pid 6599] ioctl(4, LOOP_SET_FD, 3 [pid 6598] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] <... clone3 resumed> => {parent_tid=[6601]}, 88) = 6601 [pid 5069] close(3 [pid 6598] <... futex resumed>) = 1 [pid 6595] <... futex resumed>) = 0 [pid 6591] rt_sigprocmask(SIG_SETMASK, [], [pid 6589] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... close resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6600 [pid 6598] creat("./bus", 000 [pid 6595] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6601 attached [pid 6599] <... ioctl resumed>) = 0 [pid 6598] <... creat resumed>) = 4 [pid 6595] <... futex resumed>) = 0 [pid 6591] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6600 attached [pid 6601] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6599] close(3 [pid 6598] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6591] <... futex resumed>) = 0 [pid 6598] <... futex resumed>) = 0 [pid 6595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6591] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6602 [pid 6598] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6595] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] set_robust_list(0x555555fbc6a0, 24 [pid 6595] <... futex resumed>) = 0 [ 150.303552][ T6592] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.314144][ T6593] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.324254][ T6592] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.337062][ T6599] loop3: detected capacity change from 0 to 1024 [ 150.351416][ T6593] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6602 attached [pid 6600] <... set_robust_list resumed>) = 0 [pid 6601] <... rseq resumed>) = 0 [pid 6599] <... close resumed>) = 0 [pid 6595] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6589] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6600] chdir("./83" [pid 6599] mkdir("./bus", 0777 [pid 6600] <... chdir resumed>) = 0 [pid 6600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6599] <... mkdir resumed>) = 0 [pid 6601] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6600] setpgid(0, 0 [pid 6601] <... set_robust_list resumed>) = 0 [pid 6599] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6589] <... mmap resumed>) = 0x7efd7cefb000 [pid 6602] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6601] rt_sigprocmask(SIG_SETMASK, [], [pid 6602] chdir("./84" [pid 6600] <... setpgid resumed>) = 0 [pid 6601] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6600] write(3, "1000", 4) = 4 [pid 6600] close(3) = 0 [pid 6600] symlink("/dev/binderfs", "./binderfs" [pid 6602] <... chdir resumed>) = 0 [pid 6600] <... symlink resumed>) = 0 [pid 6601] creat("./file1", 000 [pid 6589] <... mprotect resumed>) = 0 [ 150.361121][ T6592] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.367922][ T6598] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.378146][ T6593] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.385866][ T6592] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.398431][ T6592] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6589] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6602] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6600] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6601] <... creat resumed>) = 5 [pid 6592] <... write resumed>) = 57344 [pid 6591] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6589] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6600] <... futex resumed>) = 0 [pid 6600] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6602] <... prctl resumed>) = 0 [pid 6600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6601] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6592] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6591] exit_group(0 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6595] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6591] <... exit_group resumed>) = ? [pid 6600] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6595] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6595] <... futex resumed>) = 0 [pid 6600] <... mprotect resumed>) = 0 [pid 6595] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6595] <... mmap resumed>) = 0x7efd7cefb000 [pid 6600] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6595] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6595] <... mprotect resumed>) = 0 [pid 6595] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6600] <... clone3 resumed> => {parent_tid=[6603]}, 88) = 6603 [pid 6595] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6600] rt_sigprocmask(SIG_SETMASK, [], [pid 6595] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6602] setpgid(0, 0 [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6601] <... futex resumed>) = ? [pid 6592] <... futex resumed>) = ? ./strace-static-x86_64: Process 6604 attached ./strace-static-x86_64: Process 6603 attached [pid 6600] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] <... clone3 resumed> => {parent_tid=[6604]}, 88) = 6604 [pid 6589] <... clone3 resumed> => {parent_tid=[6605]}, 88) = 6605 [pid 6604] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6603] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6600] <... futex resumed>) = 0 [pid 6595] rt_sigprocmask(SIG_SETMASK, [], [pid 6592] +++ exited with 0 +++ [pid 6604] <... rseq resumed>) = 0 [pid 6603] <... rseq resumed>) = 0 [pid 6602] <... setpgid resumed>) = 0 [pid 6600] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6595] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6589] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6605 attached [pid 6604] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6601] +++ exited with 0 +++ [pid 6599] <... mount resumed>) = 0 [pid 6595] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6591] +++ exited with 0 +++ [pid 6605] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6599] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6595] <... futex resumed>) = 0 [pid 6589] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6591, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6605] <... rseq resumed>) = 0 [pid 6599] <... openat resumed>) = 3 [pid 6605] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6599] chdir("./bus" [pid 6589] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6605] <... set_robust_list resumed>) = 0 [pid 6604] <... set_robust_list resumed>) = 0 [pid 6603] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6602] <... openat resumed>) = 3 [pid 6599] <... chdir resumed>) = 0 [pid 6595] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6589] <... futex resumed>) = 0 [pid 6605] rt_sigprocmask(SIG_SETMASK, [], [pid 6602] write(3, "1000", 4 [pid 6599] ioctl(4, LOOP_CLR_FD [pid 6589] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6605] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6605] creat("./file1", 000 [pid 6604] rt_sigprocmask(SIG_SETMASK, [], [pid 6603] <... set_robust_list resumed>) = 0 [pid 6599] <... ioctl resumed>) = 0 [pid 6604] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6603] rt_sigprocmask(SIG_SETMASK, [], [pid 6604] creat("./file1", 000 [pid 6603] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6605] <... creat resumed>) = 5 [pid 6604] <... creat resumed>) = 5 [pid 6603] memfd_create("syzkaller", 0 [pid 6602] <... write resumed>) = 4 [pid 6599] close(4 [pid 6603] <... memfd_create resumed>) = 3 [pid 6603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6604] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6595] <... futex resumed>) = 0 [pid 6604] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6599] <... close resumed>) = 0 [pid 6599] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [ 150.414092][ T6598] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.422166][ T6598] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.430365][ T6593] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.443599][ T6598] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.451119][ T6593] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6605] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] close(3 [pid 6599] <... futex resumed>) = 1 [pid 6605] <... futex resumed>) = 1 [pid 6602] <... close resumed>) = 0 [pid 6599] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6589] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6605] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6602] symlink("/dev/binderfs", "./binderfs" [pid 6597] <... futex resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6602] <... symlink resumed>) = 0 [pid 6597] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6599] <... futex resumed>) = 0 [pid 6597] <... futex resumed>) = 1 [pid 5066] <... openat resumed>) = 3 [pid 6597] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] newfstatat(3, "", [pid 6602] <... futex resumed>) = 0 [pid 6599] creat("./bus", 000 [pid 6602] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6599] <... creat resumed>) = 4 [pid 6593] <... write resumed>) = 57344 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6602] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6599] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6593] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6589] exit_group(0 [pid 6605] <... futex resumed>) = ? [pid 6602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6599] <... futex resumed>) = 1 [pid 6597] <... futex resumed>) = 0 [pid 6593] <... futex resumed>) = ? [pid 6589] <... exit_group resumed>) = ? [pid 5066] getdents64(3, [pid 6605] +++ exited with 0 +++ [pid 6603] <... write resumed>) = 524288 [pid 6602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6599] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6598] <... write resumed>) = 57344 [pid 6597] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6593] +++ exited with 0 +++ [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6597] <... futex resumed>) = 0 [pid 6597] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6603] munmap(0x7efd74b1c000, 138412032 [pid 6602] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6602] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6602] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6598] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6595] exit_group(0 [pid 6604] <... futex resumed>) = ? [pid 6595] <... exit_group resumed>) = ? [pid 6604] +++ exited with 0 +++ [pid 6598] <... futex resumed>) = ? [pid 6589] +++ exited with 0 +++ [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6589, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6602] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6602] <... clone3 resumed> => {parent_tid=[6606]}, 88) = 6606 [pid 5070] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6602] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6606 attached [pid 6603] <... munmap resumed>) = 0 [pid 6606] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6603] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6606] <... rseq resumed>) = 0 [pid 6603] <... openat resumed>) = 4 [pid 6606] set_robust_list(0x7efd7cf3c9a0, 24 [ 150.467601][ T6598] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.480392][ T6598] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6603] ioctl(4, LOOP_SET_FD, 3 [pid 6606] <... set_robust_list resumed>) = 0 [pid 6602] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6598] +++ exited with 0 +++ [pid 6595] +++ exited with 0 +++ [pid 5070] newfstatat(3, "", [pid 6606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6606] memfd_create("syzkaller", 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6595, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6606] <... memfd_create resumed>) = 3 [pid 5065] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6606] <... mmap resumed>) = 0x7efd74b1c000 [pid 5065] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6602] <... futex resumed>) = 0 [pid 6606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6602] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] getdents64(3, [pid 5065] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6603] <... ioctl resumed>) = 0 [pid 6603] close(3) = 0 [pid 6603] mkdir("./bus", 0777 [pid 6597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6597] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6597] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6597] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6597] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6597] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6606] <... write resumed>) = 524288 [pid 6603] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6607 attached [pid 6597] <... clone3 resumed> => {parent_tid=[6607]}, 88) = 6607 [pid 6607] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6597] rt_sigprocmask(SIG_SETMASK, [], [pid 6607] <... rseq resumed>) = 0 [pid 6597] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6607] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6597] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] <... set_robust_list resumed>) = 0 [pid 6597] <... futex resumed>) = 0 [pid 6607] rt_sigprocmask(SIG_SETMASK, [], [pid 6597] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6607] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6607] creat("./file1", 000 [ 150.518145][ T6603] loop2: detected capacity change from 0 to 1024 [ 150.521590][ T6599] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.533367][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 150.539928][ T47] hfsplus: b-tree write err: -5, ino 4 [ 150.549108][ T2868] hfsplus: b-tree write err: -5, ino 4 [pid 6603] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6606] munmap(0x7efd74b1c000, 138412032 [pid 5066] <... umount2 resumed>) = 0 [pid 6606] <... munmap resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6606] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6606] <... openat resumed>) = 4 [pid 5070] <... umount2 resumed>) = 0 [pid 5066] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./83/bus", [pid 5066] newfstatat(AT_FDCWD, "./84/bus", [pid 6606] ioctl(4, LOOP_SET_FD, 3 [pid 6597] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 150.585505][ T6599] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.624895][ T6606] loop4: detected capacity change from 0 to 1024 [pid 6603] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 6603] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6603] <... openat resumed>) = 3 [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6603] chdir("./bus" [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6603] <... chdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 5065] close(4 [pid 5066] newfstatat(4, "", [pid 5070] newfstatat(AT_FDCWD, "./84/bus", [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] getdents64(4, [pid 5065] rmdir("./83/bus" [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6603] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./83/binderfs") = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 6603] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6603] close(4 [pid 5065] rmdir("./83" [pid 6603] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6603] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] mkdir("./84", 0777 [pid 6606] <... ioctl resumed>) = 0 [pid 6603] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6606] close(3 [pid 6603] creat("./bus", 000 [pid 6600] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(4 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6603] <... creat resumed>) = 4 [pid 6600] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6603] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6603] <... futex resumed>) = 0 [pid 6600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6603] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6600] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] <... close resumed>) = 0 [pid 6603] <... futex resumed>) = 0 [pid 6600] <... futex resumed>) = 1 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6606] mkdir("./bus", 0777 [pid 6603] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] rmdir("./84/bus" [pid 6606] <... mkdir resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... ioctl resumed>) = 0 [pid 6606] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] close(3 [pid 5070] <... openat resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6600] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] newfstatat(4, "", [pid 5066] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6606] <... mount resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6607] <... creat resumed>) = 5 [pid 6606] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] getdents64(4, [pid 5066] newfstatat(AT_FDCWD, "./84/binderfs", [pid 6607] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] <... openat resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6607] <... futex resumed>) = 0 [pid 6606] chdir("./bus" [pid 5070] getdents64(4, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6607] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6606] <... chdir resumed>) = 0 [pid 6606] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6608 [ 150.630060][ T6599] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.648834][ T6599] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.669672][ T6603] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6606] close(4 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] unlink("./84/binderfs"./strace-static-x86_64: Process 6608 attached [pid 6608] set_robust_list(0x555555fbc6a0, 24 [pid 6606] <... close resumed>) = 0 [pid 6608] <... set_robust_list resumed>) = 0 [pid 6606] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6608] chdir("./84" [pid 6606] <... futex resumed>) = 1 [pid 5070] close(4 [pid 5066] <... unlink resumed>) = 0 [pid 6608] <... chdir resumed>) = 0 [pid 6606] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6608] setpgid(0, 0 [pid 6600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6602] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6602] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(3, [pid 5070] rmdir("./84/bus" [pid 6608] <... setpgid resumed>) = 0 [pid 6600] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6606] <... futex resumed>) = 0 [pid 6602] <... futex resumed>) = 1 [pid 6600] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6608] <... openat resumed>) = 3 [pid 5066] close(3 [pid 6602] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6608] write(3, "1000", 4 [pid 6606] creat("./bus", 000 [pid 6600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] <... write resumed>) = 4 [pid 6606] <... creat resumed>) = 4 [pid 6600] <... mmap resumed>) = 0x7efd7cefb000 [pid 6599] <... write resumed>) = 57344 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 6608] close(3 [pid 6600] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6608] <... close resumed>) = 0 [pid 6600] <... mprotect resumed>) = 0 [pid 6608] symlink("/dev/binderfs", "./binderfs" [ 150.702212][ T6599] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.703481][ T6603] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.717282][ T6599] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6600] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6608] <... symlink resumed>) = 0 [pid 6606] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6600] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6599] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5066] rmdir("./84" [pid 6606] <... futex resumed>) = 1 [pid 6602] <... futex resumed>) = 0 [pid 6600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6599] <... futex resumed>) = 0 [pid 6597] exit_group(0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6607] <... futex resumed>) = ? [pid 6606] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6602] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6597] <... exit_group resumed>) = ? [pid 5070] unlink("./84/binderfs" [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6609 attached [pid 6608] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6607] +++ exited with 0 +++ [pid 6602] <... futex resumed>) = 0 [pid 6600] <... clone3 resumed> => {parent_tid=[6609]}, 88) = 6609 [pid 6599] +++ exited with 0 +++ [pid 6597] +++ exited with 0 +++ [pid 5070] <... unlink resumed>) = 0 [pid 6609] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6608] <... futex resumed>) = 0 [pid 6602] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6600] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] getdents64(3, [pid 5066] mkdir("./85", 0777 [pid 6609] <... rseq resumed>) = 0 [pid 6608] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6600] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6609] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6608] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6600] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6609] <... set_robust_list resumed>) = 0 [pid 6608] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6600] <... futex resumed>) = 0 [pid 6609] rt_sigprocmask(SIG_SETMASK, [], [pid 6608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6600] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6609] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6597, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6609] creat("./file1", 000 [pid 6608] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6608] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] close(3 [pid 5068] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 6608] <... mprotect resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6608] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] rmdir("./84" [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6608] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6608] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6610]}, 88) = 6610 [ 150.755812][ T6606] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.775039][ T6603] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.782608][ T6606] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6608] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6610 attached NULL, 8) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 6608] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6608] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6610] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6610] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6610] memfd_create("syzkaller", 0) = 3 [pid 6610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] mkdir("./85", 0777 [pid 5068] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5070] <... mkdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] close(3 [pid 5070] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5068] getdents64(3, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] close(3./strace-static-x86_64: Process 6611 attached [pid 5068] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6611 [pid 6611] set_robust_list(0x555555fbc6a0, 24 [pid 6602] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6609] <... creat resumed>) = 5 [pid 6600] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6609] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6609] <... futex resumed>) = 0 [pid 6609] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6602] <... futex resumed>) = 0 [pid 6602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6611] <... set_robust_list resumed>) = 0 [pid 6602] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6610] <... write resumed>) = 524288 [pid 6611] chdir("./85" [pid 6610] munmap(0x7efd74b1c000, 138412032 [pid 6602] <... mprotect resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6612 ./strace-static-x86_64: Process 6612 attached [pid 6611] <... chdir resumed>) = 0 [pid 6610] <... munmap resumed>) = 0 [pid 6602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6612] set_robust_list(0x555555fbc6a0, 24 [pid 6611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6613 attached [pid 6612] <... set_robust_list resumed>) = 0 [pid 6611] <... prctl resumed>) = 0 [pid 6610] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6613] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6612] chdir("./85" [pid 6613] <... rseq resumed>) = 0 [pid 6602] <... clone3 resumed> => {parent_tid=[6613]}, 88) = 6613 [pid 6613] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6611] setpgid(0, 0 [pid 6602] rt_sigprocmask(SIG_SETMASK, [], [pid 6613] <... set_robust_list resumed>) = 0 [pid 6612] <... chdir resumed>) = 0 [pid 6602] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6613] rt_sigprocmask(SIG_SETMASK, [], [pid 6611] <... setpgid resumed>) = 0 [pid 6602] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6613] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6602] <... futex resumed>) = 0 [ 150.801823][ T6603] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.802481][ T6606] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.827266][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 150.846602][ T6603] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6613] creat("./file1", 000 [pid 6612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6610] <... openat resumed>) = 4 [pid 6602] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6610] ioctl(4, LOOP_SET_FD, 3 [pid 6613] <... creat resumed>) = 5 [pid 6612] <... prctl resumed>) = 0 [pid 6611] <... openat resumed>) = 3 [pid 6611] write(3, "1000", 4 [pid 6613] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] setpgid(0, 0 [pid 6611] <... write resumed>) = 4 [pid 6613] <... futex resumed>) = 1 [pid 6612] <... setpgid resumed>) = 0 [pid 6611] close(3 [pid 6602] <... futex resumed>) = 0 [pid 6610] <... ioctl resumed>) = 0 [pid 6610] close(3) = 0 [pid 6610] mkdir("./bus", 0777 [pid 6611] <... close resumed>) = 0 [pid 6610] <... mkdir resumed>) = 0 [pid 6610] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6611] symlink("/dev/binderfs", "./binderfs" [pid 6612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6613] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] <... openat resumed>) = 3 [pid 6611] <... symlink resumed>) = 0 [pid 6610] <... mount resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6612] write(3, "1000", 4 [pid 6611] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6610] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6612] <... write resumed>) = 4 [pid 6611] <... futex resumed>) = 0 [pid 6610] <... openat resumed>) = 3 [pid 5068] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] close(3 [pid 6611] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6610] chdir("./bus" [pid 6612] <... close resumed>) = 0 [pid 6611] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6610] <... chdir resumed>) = 0 [pid 6612] symlink("/dev/binderfs", "./binderfs" [pid 6611] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6610] ioctl(4, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6612] <... symlink resumed>) = 0 [pid 6611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6610] <... ioctl resumed>) = 0 [pid 6603] <... write resumed>) = 57344 [pid 5068] newfstatat(AT_FDCWD, "./85/bus", [pid 6612] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6610] close(4 [pid 6603] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6612] <... futex resumed>) = 0 [pid 6611] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6610] <... close resumed>) = 0 [pid 6603] <... futex resumed>) = 0 [pid 5068] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6611] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6610] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6603] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6600] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6612] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6611] <... mprotect resumed>) = 0 [pid 6610] <... futex resumed>) = 1 [pid 6609] <... futex resumed>) = ? [pid 6608] <... futex resumed>) = 0 [pid 6603] <... futex resumed>) = ? [pid 6600] <... exit_group resumed>) = ? [ 150.861086][ T6606] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.864236][ T6610] loop0: detected capacity change from 0 to 1024 [ 150.878911][ T6606] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.882300][ T6603] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.890962][ T6606] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6611] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6610] creat("./bus", 000 [pid 6609] +++ exited with 0 +++ [pid 6608] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6603] +++ exited with 0 +++ [pid 6600] +++ exited with 0 +++ [pid 6606] <... write resumed>) = 57344 [pid 5068] <... openat resumed>) = 4 [pid 6612] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6611] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6608] <... futex resumed>) = 0 [pid 5068] newfstatat(4, "", [pid 6606] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6610] <... creat resumed>) = 4 [pid 6608] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6612] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6610] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6606] <... futex resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6600, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- ./strace-static-x86_64: Process 6614 attached [pid 6612] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6610] <... futex resumed>) = 1 [pid 6608] <... futex resumed>) = 0 [pid 6606] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] getdents64(4, [pid 6614] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6612] <... mprotect resumed>) = 0 [pid 6611] <... clone3 resumed> => {parent_tid=[6614]}, 88) = 6614 [pid 6610] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6608] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6602] exit_group(0 [pid 5067] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6614] <... rseq resumed>) = 0 [pid 6612] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6611] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6614] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6613] <... futex resumed>) = ? [pid 6612] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6608] <... futex resumed>) = 0 [pid 6606] <... futex resumed>) = ? [pid 6602] <... exit_group resumed>) = ? [pid 5068] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6614] <... set_robust_list resumed>) = 0 [pid 6613] +++ exited with 0 +++ [pid 6612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6611] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6608] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6606] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6614] rt_sigprocmask(SIG_SETMASK, [], [pid 6611] <... futex resumed>) = 0 [pid 5068] close(4 [pid 5067] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6614] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6611] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5068] rmdir("./85/bus" [pid 6614] memfd_create("syzkaller", 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6614] <... memfd_create resumed>) = 3 [pid 6612] <... clone3 resumed> => {parent_tid=[6615]}, 88) = 6615 [pid 6602] +++ exited with 0 +++ [pid 5068] <... rmdir resumed>) = 0 [pid 6614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6612] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6602, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6614] <... mmap resumed>) = 0x7efd74b1c000 [pid 6612] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6615 attached [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 6612] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 6615] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6615] rt_sigprocmask(SIG_SETMASK, [], [pid 6612] <... futex resumed>) = 0 [pid 6615] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6612] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6615] memfd_create("syzkaller", 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6615] <... memfd_create resumed>) = 3 [pid 6614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6615] <... mmap resumed>) = 0x7efd74b1c000 [pid 6614] <... write resumed>) = 524288 [pid 5069] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6614] munmap(0x7efd74b1c000, 138412032 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] unlink("./85/binderfs" [pid 6615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6614] <... munmap resumed>) = 0 [pid 5069] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... unlink resumed>) = 0 [ 150.960376][ T6610] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.975106][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 150.991792][ T6610] hfsplus: request for non-existent node 16715520 in B*Tree [ 150.999399][ T6610] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6615] <... write resumed>) = 524288 [pid 6614] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6608] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] getdents64(3, [pid 5067] <... umount2 resumed>) = 0 [pid 6608] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6614] <... openat resumed>) = 4 [pid 5068] close(3 [pid 6608] <... futex resumed>) = 0 [pid 6608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./85" [pid 6608] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... rmdir resumed>) = 0 [pid 5068] mkdir("./86", 0777 [pid 6614] ioctl(4, LOOP_SET_FD, 3 [pid 6608] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... mkdir resumed>) = 0 [pid 5067] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] <... mprotect resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6608] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6608] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6616]}, 88) = 6616 [pid 6615] munmap(0x7efd74b1c000, 138412032 [pid 6608] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6616 attached [pid 6615] <... munmap resumed>) = 0 [pid 6608] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5067] newfstatat(AT_FDCWD, "./83/bus", [pid 6616] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6616] <... rseq resumed>) = 0 [pid 6615] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6608] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6608] <... futex resumed>) = 0 [pid 6616] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6608] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6616] <... set_robust_list resumed>) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6615] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 6615] ioctl(4, LOOP_SET_FD, 3 [pid 6616] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] newfstatat(4, "", [pid 6616] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6617 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6617 attached [pid 6616] creat("./file1", 000 [pid 5067] getdents64(4, [pid 6617] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6617] chdir("./86" [pid 6614] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6614] close(3 [pid 5067] getdents64(4, [pid 6614] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6617] <... chdir resumed>) = 0 [pid 5067] close(4 [pid 6617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] <... close resumed>) = 0 [pid 6617] setpgid(0, 0 [pid 5067] rmdir("./83/bus" [pid 6617] <... setpgid resumed>) = 0 [pid 6617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 6617] <... openat resumed>) = 3 [pid 5067] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6617] write(3, "1000", 4) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6617] close(3) = 0 [pid 5067] newfstatat(AT_FDCWD, "./83/binderfs", [pid 6614] mkdir("./bus", 0777 [pid 6617] symlink("/dev/binderfs", "./binderfs" [pid 6615] <... ioctl resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./83/binderfs" [pid 6617] <... symlink resumed>) = 0 [pid 6615] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 6617] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 6617] <... futex resumed>) = 0 [pid 6615] mkdir("./bus", 0777 [pid 6614] <... mkdir resumed>) = 0 [pid 6617] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6615] <... mkdir resumed>) = 0 [pid 6614] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6617] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6615] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] <... umount2 resumed>) = 0 [pid 5067] close(3 [pid 6617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6615] <... mount resumed>) = 0 [pid 5069] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6615] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 151.016511][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 151.036126][ T6614] loop1: detected capacity change from 0 to 1024 [ 151.046628][ T6615] loop5: detected capacity change from 0 to 1024 [ 151.056202][ T6610] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6615] <... openat resumed>) = 3 [pid 5069] newfstatat(AT_FDCWD, "./84/bus", [pid 6617] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6608] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... close resumed>) = 0 [pid 6617] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] rmdir("./83" [pid 6617] <... mprotect resumed>) = 0 [pid 6615] chdir("./bus" [pid 5069] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6617] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6615] <... chdir resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 6617] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] mkdir("./84", 0777 [pid 6617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6615] ioctl(4, LOOP_CLR_FD [pid 5069] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6615] <... ioctl resumed>) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6618 attached [pid 6617] <... clone3 resumed> => {parent_tid=[6618]}, 88) = 6618 [pid 6615] close(4 [pid 5069] newfstatat(4, "", [pid 6618] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6617] rt_sigprocmask(SIG_SETMASK, [], [pid 6615] <... close resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6618] <... rseq resumed>) = 0 [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6615] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(4, [pid 6618] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6617] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] <... futex resumed>) = 1 [pid 6612] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6618] <... set_robust_list resumed>) = 0 [pid 6617] <... futex resumed>) = 0 [pid 6615] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6612] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(4, [pid 6618] rt_sigprocmask(SIG_SETMASK, [], [pid 6617] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6612] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6618] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6615] creat("./bus", 000 [pid 6612] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6618] memfd_create("syzkaller", 0 [pid 6614] <... mount resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6618] <... memfd_create resumed>) = 3 [pid 6618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6615] <... creat resumed>) = 4 [pid 6614] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... close resumed>) = 0 [pid 5067] close(3 [pid 6618] <... mmap resumed>) = 0x7efd74b1c000 [pid 6615] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] <... openat resumed>) = 3 [pid 5069] rmdir("./84/bus" [pid 5067] <... close resumed>) = 0 [pid 6614] chdir("./bus" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6615] <... futex resumed>) = 1 [pid 6614] <... chdir resumed>) = 0 [pid 6612] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6614] ioctl(4, LOOP_CLR_FD [pid 6612] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6612] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6612] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6615] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 151.087809][ T6610] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.106222][ T6610] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] unlink("./84/binderfs" [pid 6614] <... ioctl resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6614] close(4 [pid 5069] getdents64(3, [pid 6614] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6614] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 6618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6614] <... futex resumed>) = 1 [pid 6611] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 ./strace-static-x86_64: Process 6619 attached [pid 6614] creat("./bus", 000 [pid 6611] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6619 [pid 6619] set_robust_list(0x555555fbc6a0, 24 [pid 6611] <... futex resumed>) = 0 [pid 6614] <... creat resumed>) = 4 [pid 6611] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6619] <... set_robust_list resumed>) = 0 [pid 6614] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6619] chdir("./84" [pid 6616] <... creat resumed>) = 5 [pid 6614] <... futex resumed>) = 0 [pid 6611] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] rmdir("./84" [pid 6616] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6614] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6616] <... futex resumed>) = 0 [pid 6611] <... futex resumed>) = 0 [pid 6619] <... chdir resumed>) = 0 [pid 6616] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... rmdir resumed>) = 0 [pid 6619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6618] <... write resumed>) = 524288 [pid 6619] setpgid(0, 0 [pid 5069] mkdir("./85", 0777 [pid 6619] <... setpgid resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 6610] <... write resumed>) = 57344 [pid 6610] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6610] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6608] exit_group(0 [pid 6616] <... futex resumed>) = ? [pid 6608] <... exit_group resumed>) = ? [pid 6610] <... futex resumed>) = ? [pid 6616] +++ exited with 0 +++ [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3 [pid 6618] munmap(0x7efd74b1c000, 138412032 [pid 5069] <... close resumed>) = 0 [pid 6618] <... munmap resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6610] +++ exited with 0 +++ [pid 6608] +++ exited with 0 +++ [pid 6619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6608, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] getdents64(3, [pid 6612] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6612] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] <... openat resumed>) = 4 [pid 6612] <... futex resumed>) = 0 [pid 6618] ioctl(4, LOOP_SET_FD, 3 [pid 6612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6620 attached [pid 6619] <... openat resumed>) = 3 [pid 6612] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6620 [ 151.132266][ T6615] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.139597][ T6615] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.170565][ T6614] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.175159][ T6618] loop3: detected capacity change from 0 to 1024 [pid 6620] set_robust_list(0x555555fbc6a0, 24 [pid 6619] write(3, "1000", 4 [pid 6612] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6621]}, 88) = 6621 [pid 6612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6612] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6612] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6620] <... set_robust_list resumed>) = 0 [pid 6619] <... write resumed>) = 4 [pid 6611] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6621 attached [pid 6621] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6621] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6621] creat("./file1", 000 [pid 6618] <... ioctl resumed>) = 0 [pid 6618] close(3) = 0 [pid 6618] mkdir("./bus", 0777 [pid 6620] chdir("./85" [pid 6619] close(3 [pid 6618] <... mkdir resumed>) = 0 [pid 6611] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6618] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6611] <... futex resumed>) = 0 [pid 6619] <... close resumed>) = 0 [pid 6611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6620] <... chdir resumed>) = 0 [ 151.186021][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 151.201273][ T6614] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.204824][ T6615] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.209912][ T6614] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.229261][ T6614] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6621] <... creat resumed>) = 5 [pid 6620] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6619] symlink("/dev/binderfs", "./binderfs" [pid 6612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6611] <... mmap resumed>) = 0x7efd7cefb000 [pid 6621] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6621] <... futex resumed>) = 0 [pid 6620] <... prctl resumed>) = 0 [pid 6619] <... symlink resumed>) = 0 [pid 6611] <... mprotect resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6621] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] setpgid(0, 0 [pid 6619] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6620] <... setpgid resumed>) = 0 [pid 6619] <... futex resumed>) = 0 [pid 6618] <... mount resumed>) = 0 [pid 6611] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6618] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6619] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6618] <... openat resumed>) = 3 [pid 6611] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6620] <... openat resumed>) = 3 [pid 6619] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6618] chdir("./bus" [pid 5065] newfstatat(AT_FDCWD, "./84/bus", [pid 6620] write(3, "1000", 4 [pid 6619] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6618] <... chdir resumed>) = 0 [ 151.238130][ T6615] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.246807][ T6614] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.260782][ T6615] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.273953][ T6615] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6611] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6620] <... write resumed>) = 4 [pid 6619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6618] ioctl(4, LOOP_CLR_FD [pid 6615] <... write resumed>) = 57344 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6620] close(3 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6618] <... ioctl resumed>) = 0 [pid 6615] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6611] <... clone3 resumed> => {parent_tid=[6622]}, 88) = 6622 [pid 6620] <... close resumed>) = 0 [pid 6619] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6618] close(4 [pid 6615] <... futex resumed>) = 0 [pid 6611] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6622 attached [pid 6620] symlink("/dev/binderfs", "./binderfs" [pid 6619] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6618] <... close resumed>) = 0 [pid 6615] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6614] <... write resumed>) = 57344 [pid 6611] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6622] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6619] <... mprotect resumed>) = 0 [pid 6618] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] exit_group(0 [pid 5065] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6622] <... rseq resumed>) = 0 [pid 6621] <... futex resumed>) = ? [pid 6620] <... symlink resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6618] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6615] <... futex resumed>) = ? [pid 6614] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6612] <... exit_group resumed>) = ? [pid 6611] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6622] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6621] +++ exited with 0 +++ [pid 6620] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6618] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6617] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6615] +++ exited with 0 +++ [pid 6614] <... futex resumed>) = 0 [pid 6612] +++ exited with 0 +++ [pid 6611] <... futex resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6622] <... set_robust_list resumed>) = 0 [pid 6620] <... futex resumed>) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6617] <... futex resumed>) = 0 [pid 6614] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6612, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] newfstatat(4, "", ./strace-static-x86_64: Process 6623 attached [pid 6622] rt_sigprocmask(SIG_SETMASK, [], [pid 6620] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6618] creat("./bus", 000 [pid 6617] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6623] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6622] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6620] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6619] <... clone3 resumed> => {parent_tid=[6623]}, 88) = 6623 [pid 6618] <... creat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6623] <... rseq resumed>) = 0 [pid 6622] creat("./file1", 000 [pid 6620] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6619] rt_sigprocmask(SIG_SETMASK, [], [pid 6618] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(4, [pid 6623] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6622] <... creat resumed>) = 5 [pid 6619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6619] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6619] <... futex resumed>) = 0 [pid 6622] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6619] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6611] <... futex resumed>) = 0 [pid 5070] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 6622] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6611] exit_group(0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6622] <... futex resumed>) = ? [pid 6620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6614] <... futex resumed>) = ? [pid 6611] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(4 [pid 6623] <... set_robust_list resumed>) = 0 [pid 6622] +++ exited with 0 +++ [pid 6620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6618] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 6614] +++ exited with 0 +++ [pid 6611] +++ exited with 0 +++ [pid 5070] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 6623] rt_sigprocmask(SIG_SETMASK, [], [pid 6617] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6611, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] rmdir("./84/bus" [pid 6623] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6618] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6617] <... futex resumed>) = 0 [ 151.284226][ T6614] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] <... openat resumed>) = 3 [pid 6623] memfd_create("syzkaller", 0 [pid 6620] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] newfstatat(3, "", [pid 5065] <... rmdir resumed>) = 0 [pid 6623] <... memfd_create resumed>) = 3 [pid 6620] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6617] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6620] <... mprotect resumed>) = 0 [pid 5070] getdents64(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6623] <... mmap resumed>) = 0x7efd74b1c000 [pid 6620] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(AT_FDCWD, "./84/binderfs", [pid 6620] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6620] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] newfstatat(3, "", [pid 5065] unlink("./84/binderfs" [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6620] <... clone3 resumed> => {parent_tid=[6624]}, 88) = 6624 [pid 5066] getdents64(3, [pid 5065] getdents64(3, [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6620] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 6620] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... close resumed>) = 0 ./strace-static-x86_64: Process 6624 attached [pid 6623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6620] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./84" [pid 6620] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6620] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] mkdir("./85", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6624] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053./strace-static-x86_64: Process 6625 attached [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6625 [pid 6625] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6625] chdir("./85") = 0 [pid 6625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6624] <... rseq resumed>) = 0 [pid 6625] <... prctl resumed>) = 0 [pid 6624] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6623] <... write resumed>) = 524288 [pid 6624] <... set_robust_list resumed>) = 0 [pid 6624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6624] memfd_create("syzkaller", 0 [pid 6625] setpgid(0, 0) = 0 [pid 6625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6625] <... openat resumed>) = 3 [pid 6625] write(3, "1000", 4) = 4 [pid 6617] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = 0 [pid 6617] <... futex resumed>) = 0 [ 151.347063][ T2868] hfsplus: b-tree write err: -5, ino 4 [ 151.355017][ T6618] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.363416][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 151.370434][ T6618] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6625] close(3) = 0 [pid 6625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6625] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6617] <... mmap resumed>) = 0x7efd7cefb000 [pid 6617] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6624] <... memfd_create resumed>) = 3 [pid 6625] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6623] munmap(0x7efd74b1c000, 138412032 [pid 6617] <... mprotect resumed>) = 0 [pid 5070] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 6617] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6625] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6624] <... mmap resumed>) = 0x7efd74b1c000 [pid 6623] <... munmap resumed>) = 0 [pid 6617] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6625] <... mprotect resumed>) = 0 [pid 6625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6623] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] newfstatat(AT_FDCWD, "./85/bus", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6626 attached [pid 6625] <... clone3 resumed> => {parent_tid=[6626]}, 88) = 6626 [pid 6623] <... openat resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6627 attached [pid 6626] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6625] rt_sigprocmask(SIG_SETMASK, [], [pid 6623] ioctl(4, LOOP_SET_FD, 3 [pid 6617] <... clone3 resumed> => {parent_tid=[6627]}, 88) = 6627 [pid 5070] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] newfstatat(AT_FDCWD, "./85/bus", [pid 6627] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6626] <... rseq resumed>) = 0 [pid 6625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6617] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6627] <... rseq resumed>) = 0 [pid 6625] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6627] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6625] <... futex resumed>) = 0 [pid 6627] <... set_robust_list resumed>) = 0 [pid 6625] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6627] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6626] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6617] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6626] <... set_robust_list resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 151.396252][ T6618] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.423451][ T6618] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5066] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6617] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6627] <... futex resumed>) = 0 [pid 6626] memfd_create("syzkaller", 0 [pid 6617] <... futex resumed>) = 1 [pid 5070] newfstatat(4, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6627] creat("./file1", 000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6617] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6627] <... creat resumed>) = 5 [pid 6626] <... memfd_create resumed>) = 3 [pid 5070] getdents64(4, [pid 6626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... openat resumed>) = 4 [pid 6627] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6626] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] getdents64(4, [pid 5066] newfstatat(4, "", [pid 6627] <... futex resumed>) = 1 [pid 6617] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6627] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6623] <... ioctl resumed>) = 0 [pid 5070] close(4 [pid 5066] getdents64(4, [pid 6623] close(3 [pid 5070] <... close resumed>) = 0 [pid 6623] <... close resumed>) = 0 [pid 5070] rmdir("./85/bus" [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6623] mkdir("./bus", 0777 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] getdents64(4, [pid 6626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6623] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [ 151.442681][ T6623] loop2: detected capacity change from 0 to 1024 [pid 6626] <... write resumed>) = 524288 [pid 6624] <... write resumed>) = 524288 [pid 6623] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./85/bus" [pid 5070] newfstatat(AT_FDCWD, "./85/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 6626] munmap(0x7efd74b1c000, 138412032 [pid 6624] munmap(0x7efd74b1c000, 138412032 [pid 6618] <... write resumed>) = 57344 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6626] <... munmap resumed>) = 0 [pid 6624] <... munmap resumed>) = 0 [pid 6623] <... mount resumed>) = 0 [pid 6618] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] unlink("./85/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6626] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6623] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6618] <... futex resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./85/binderfs", [pid 6626] <... openat resumed>) = 4 [pid 6624] <... openat resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6623] <... openat resumed>) = 3 [pid 6618] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6626] ioctl(4, LOOP_SET_FD, 3 [pid 6624] ioctl(4, LOOP_SET_FD, 3 [pid 6617] exit_group(0 [pid 5070] getdents64(3, [pid 5066] unlink("./85/binderfs" [pid 6623] chdir("./bus" [pid 6617] <... exit_group resumed>) = ? [pid 6627] <... futex resumed>) = ? [pid 6627] +++ exited with 0 +++ [pid 6624] <... ioctl resumed>) = 0 [pid 6626] <... ioctl resumed>) = 0 [pid 6623] <... chdir resumed>) = 0 [pid 6618] <... futex resumed>) = ? [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6626] close(3 [pid 6624] close(3 [pid 6623] ioctl(4, LOOP_CLR_FD [pid 6626] <... close resumed>) = 0 [pid 6624] <... close resumed>) = 0 [pid 6623] <... ioctl resumed>) = 0 [pid 5070] close(3 [pid 5066] getdents64(3, [pid 6624] mkdir("./bus", 0777 [pid 6623] close(4 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6626] mkdir("./bus", 0777 [pid 6624] <... mkdir resumed>) = 0 [pid 6623] <... close resumed>) = 0 [pid 6618] +++ exited with 0 +++ [pid 6617] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 5066] close(3 [pid 6624] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6623] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./85" [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6617, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] <... close resumed>) = 0 [pid 6626] <... mkdir resumed>) = 0 [pid 6623] <... futex resumed>) = 1 [pid 6619] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5066] rmdir("./85" [pid 6626] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6623] creat("./bus", 000 [pid 6619] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... rmdir resumed>) = 0 [pid 6619] <... futex resumed>) = 0 [pid 5068] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6623] <... creat resumed>) = 4 [pid 6619] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] mkdir("./86", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] mkdir("./86", 0777 [pid 5068] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6626] <... mount resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... mkdir resumed>) = 0 [pid 6626] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6623] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6626] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 6626] chdir("./bus" [pid 6624] <... mount resumed>) = 0 [pid 6623] <... futex resumed>) = 1 [pid 6619] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6626] <... chdir resumed>) = 0 [pid 6624] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6623] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5068] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6626] ioctl(4, LOOP_CLR_FD [pid 6624] <... openat resumed>) = 3 [pid 6623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6619] <... futex resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 3 [pid 6624] chdir("./bus" [pid 6623] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6619] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] <... chdir resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6624] ioctl(4, LOOP_CLR_FD [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6624] <... ioctl resumed>) = 0 [pid 6624] close(4) = 0 [pid 5066] close(3 [pid 6624] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 6624] <... futex resumed>) = 1 [pid 6620] <... futex resumed>) = 0 [pid 6624] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6626] <... ioctl resumed>) = 0 [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] <... futex resumed>) = 0 [ 151.469609][ T6618] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.478668][ T6618] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.498978][ T6624] loop4: detected capacity change from 0 to 1024 [ 151.502523][ T6626] loop0: detected capacity change from 0 to 1024 [pid 6624] creat("./bus", 000 [pid 6626] close(4 [pid 6624] <... creat resumed>) = 4 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6626] <... close resumed>) = 0 [pid 6620] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3 [pid 6626] <... futex resumed>) = 1 [pid 6625] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6626] creat("./bus", 000 [pid 6625] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6625] <... futex resumed>) = 0 [pid 6625] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6624] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6620] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6628 attached [pid 6626] <... creat resumed>) = 4 [pid 6624] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6620] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6624] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6620] <... futex resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6628 [pid 6628] set_robust_list(0x555555fbc6a0, 24 [pid 6624] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6620] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6626] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6629 attached [pid 6628] <... set_robust_list resumed>) = 0 [pid 6628] chdir("./86") = 0 [pid 6628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6628] setpgid(0, 0) = 0 [pid 6628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6626] <... futex resumed>) = 1 [pid 6625] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6629 [pid 6629] set_robust_list(0x555555fbc6a0, 24 [pid 6625] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6625] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6629] <... set_robust_list resumed>) = 0 [pid 6626] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6629] chdir("./86" [pid 6619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6629] <... chdir resumed>) = 0 [pid 6628] <... openat resumed>) = 3 [pid 6619] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6619] <... futex resumed>) = 0 [pid 6629] <... prctl resumed>) = 0 [pid 6619] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6629] setpgid(0, 0 [pid 6619] <... mmap resumed>) = 0x7efd7cefb000 [pid 6629] <... setpgid resumed>) = 0 [ 151.546272][ T58] hfsplus: b-tree write err: -5, ino 4 [ 151.565966][ T6623] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.588335][ T6624] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6628] write(3, "1000", 4 [pid 6619] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6628] <... write resumed>) = 4 [pid 6619] <... mprotect resumed>) = 0 [pid 6619] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6628] close(3 [pid 6619] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6628] <... close resumed>) = 0 [pid 6619] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6630 attached [pid 6629] <... openat resumed>) = 3 [pid 6628] symlink("/dev/binderfs", "./binderfs" [pid 6619] <... clone3 resumed> => {parent_tid=[6630]}, 88) = 6630 [pid 6630] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6629] write(3, "1000", 4 [pid 6630] <... rseq resumed>) = 0 [pid 6629] <... write resumed>) = 4 [pid 6630] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6629] close(3 [pid 6630] <... set_robust_list resumed>) = 0 [pid 6629] <... close resumed>) = 0 [pid 6630] rt_sigprocmask(SIG_SETMASK, [], [pid 6629] symlink("/dev/binderfs", "./binderfs" [pid 6630] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6630] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] <... symlink resumed>) = 0 [pid 6628] <... symlink resumed>) = 0 [pid 6620] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6619] rt_sigprocmask(SIG_SETMASK, [], [pid 6620] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6619] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6620] <... futex resumed>) = 0 [pid 6619] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... futex resumed>) = 0 [pid 6620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6619] <... futex resumed>) = 1 [ 151.603736][ T6626] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.614640][ T6623] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.631797][ T6626] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.639518][ T6626] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6630] creat("./file1", 000 [pid 6629] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... mmap resumed>) = 0x7efd7cefb000 [pid 6619] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6628] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6628] <... futex resumed>) = 0 [pid 6620] <... mprotect resumed>) = 0 [pid 6628] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6620] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6628] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6620] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6628] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6625] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6629] <... futex resumed>) = 0 [pid 6628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6625] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6620] <... clone3 resumed> => {parent_tid=[6631]}, 88) = 6631 [pid 6628] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6625] <... mmap resumed>) = 0x7efd7cefb000 [pid 6620] rt_sigprocmask(SIG_SETMASK, [], [pid 6628] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6625] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6620] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6631 attached [pid 6628] <... mprotect resumed>) = 0 [pid 6625] <... mprotect resumed>) = 0 [pid 6620] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6631] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6628] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6625] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6620] <... futex resumed>) = 0 [pid 6631] <... rseq resumed>) = 0 [pid 6628] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6625] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6620] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6631] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6632 attached [pid 6631] <... set_robust_list resumed>) = 0 [pid 6629] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6632] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6631] rt_sigprocmask(SIG_SETMASK, [], [pid 6628] <... clone3 resumed> => {parent_tid=[6632]}, 88) = 6632 [pid 6625] <... clone3 resumed> => {parent_tid=[6633]}, 88) = 6633 [pid 6631] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6628] rt_sigprocmask(SIG_SETMASK, [], [pid 6625] rt_sigprocmask(SIG_SETMASK, [], [pid 6631] creat("./file1", 000 [pid 6628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6625] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6628] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6625] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... futex resumed>) = 0 [pid 6625] <... futex resumed>) = 0 [pid 6632] <... rseq resumed>) = 0 [pid 6628] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6625] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6632] memfd_create("syzkaller", 0) = 3 [pid 6632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6629] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6633 attached [pid 6629] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6633] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] newfstatat(4, "", [pid 6633] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6633] <... set_robust_list resumed>) = 0 [pid 6632] <... write resumed>) = 524288 [pid 6629] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./86/bus" [pid 6619] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... rmdir resumed>) = 0 [pid 6633] rt_sigprocmask(SIG_SETMASK, [], [pid 6629] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6633] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6629] <... mprotect resumed>) = 0 [pid 6633] creat("./file1", 000 [pid 6631] <... creat resumed>) = 5 [pid 6629] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6631] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6620] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6631] <... futex resumed>) = 0 [pid 6631] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6629] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6632] munmap(0x7efd74b1c000, 138412032 [pid 5068] unlink("./86/binderfs" [pid 6632] <... munmap resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3) = 0 [pid 5068] rmdir("./86" [pid 6632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... rmdir resumed>) = 0 [pid 6632] <... openat resumed>) = 4 [pid 6632] ioctl(4, LOOP_SET_FD, 3 [ 151.648146][ T6623] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.651516][ T6624] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.678671][ T6626] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.683559][ T6623] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6625] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6629] <... clone3 resumed> => {parent_tid=[6634]}, 88) = 6634 ./strace-static-x86_64: Process 6634 attached [pid 6633] <... creat resumed>) = 5 [pid 5068] mkdir("./87", 0777 [pid 6634] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6634] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 6634] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6630] <... creat resumed>) = 5 [pid 6629] rt_sigprocmask(SIG_SETMASK, [], [pid 6633] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6630] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6629] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6630] <... futex resumed>) = 0 [pid 6633] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] <... futex resumed>) = 1 [pid 6630] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6634] <... futex resumed>) = 0 [pid 6629] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6634] memfd_create("syzkaller", 0) = 3 [pid 6634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6632] <... ioctl resumed>) = 0 [pid 6632] close(3 [pid 5068] <... openat resumed>) = 3 [pid 6632] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6632] mkdir("./bus", 0777 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6632] <... mkdir resumed>) = 0 [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6632] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6635 [ 151.697408][ T6624] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.705998][ T6632] loop1: detected capacity change from 0 to 1024 [ 151.716977][ T6626] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.727997][ T6624] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.738531][ T6623] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.741729][ T6626] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6635 attached [pid 6634] <... write resumed>) = 524288 [pid 6632] <... mount resumed>) = 0 [pid 6635] set_robust_list(0x555555fbc6a0, 24 [pid 6632] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6635] <... set_robust_list resumed>) = 0 [pid 6634] munmap(0x7efd74b1c000, 138412032 [pid 6635] chdir("./87" [pid 6634] <... munmap resumed>) = 0 [pid 6635] <... chdir resumed>) = 0 [pid 6635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6634] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6632] <... openat resumed>) = 3 [pid 6626] <... write resumed>) = 57344 [pid 6635] setpgid(0, 0 [pid 6634] <... openat resumed>) = 4 [pid 6635] <... setpgid resumed>) = 0 [pid 6634] ioctl(4, LOOP_SET_FD, 3 [pid 6626] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6626] <... futex resumed>) = 0 [pid 6632] chdir("./bus" [pid 6625] exit_group(0 [pid 6632] <... chdir resumed>) = 0 [pid 6625] <... exit_group resumed>) = ? [pid 6632] ioctl(4, LOOP_CLR_FD) = 0 [pid 6632] close(4) = 0 [pid 6632] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6628] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6628] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] creat("./bus", 000 [pid 6635] <... openat resumed>) = 3 [pid 6633] <... futex resumed>) = ? [pid 6632] <... creat resumed>) = 4 [pid 6635] write(3, "1000", 4 [pid 6633] +++ exited with 0 +++ [pid 6632] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] <... write resumed>) = 57344 [pid 6634] <... ioctl resumed>) = 0 [pid 6632] <... futex resumed>) = 1 [pid 6628] <... futex resumed>) = 0 [pid 6623] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] close(3 [pid 6632] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6628] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6623] <... futex resumed>) = 0 [pid 6635] <... write resumed>) = 4 [pid 6634] <... close resumed>) = 0 [pid 6632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6628] <... futex resumed>) = 0 [pid 6626] +++ exited with 0 +++ [pid 6625] +++ exited with 0 +++ [pid 6623] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6619] exit_group(0 [pid 6635] close(3 [pid 6634] mkdir("./bus", 0777 [pid 6632] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6628] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6623] <... futex resumed>) = ? [pid 6619] <... exit_group resumed>) = ? [pid 6635] <... close resumed>) = 0 [pid 6630] <... futex resumed>) = ? [pid 6623] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6625, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6635] symlink("/dev/binderfs", "./binderfs" [pid 6634] <... mkdir resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 6635] <... symlink resumed>) = 0 [pid 6630] +++ exited with 0 +++ [pid 6619] +++ exited with 0 +++ [pid 6635] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [ 151.767631][ T6624] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.780329][ T6623] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.796275][ T6634] loop5: detected capacity change from 0 to 1024 [ 151.803649][ T6624] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6634] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... restart_syscall resumed>) = 0 [pid 6635] <... futex resumed>) = 0 [pid 6635] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6619, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6634] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6635] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6635] <... mprotect resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 6635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(3, "", [pid 6635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6634] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6624] <... write resumed>) = 57344 [pid 5067] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6636 attached [pid 6634] <... openat resumed>) = 3 [pid 6624] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6636] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6635] <... clone3 resumed> => {parent_tid=[6636]}, 88) = 6636 [pid 6634] chdir("./bus" [pid 6624] <... futex resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 6635] rt_sigprocmask(SIG_SETMASK, [], [pid 6634] <... chdir resumed>) = 0 [pid 6624] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6636] <... rseq resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 6636] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6634] ioctl(4, LOOP_CLR_FD [pid 6620] exit_group(0 [pid 5067] getdents64(3, [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6636] <... set_robust_list resumed>) = 0 [pid 6635] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] <... ioctl resumed>) = 0 [pid 6631] <... futex resumed>) = ? [pid 6624] <... futex resumed>) = ? [pid 6620] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] <... futex resumed>) = 0 [pid 6634] close(4 [pid 6631] +++ exited with 0 +++ [pid 6624] +++ exited with 0 +++ [pid 6620] +++ exited with 0 +++ [pid 5067] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6634] <... close resumed>) = 0 [pid 6636] memfd_create("syzkaller", 0 [pid 6634] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6636] <... memfd_create resumed>) = 3 [pid 6634] <... futex resumed>) = 1 [pid 6628] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6620, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 6636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6634] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] <... futex resumed>) = 0 [pid 6628] <... futex resumed>) = 0 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 6636] <... mmap resumed>) = 0x7efd74b1c000 [pid 6634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6629] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... restart_syscall resumed>) = 0 [ 151.827880][ T6632] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.858693][ T47] hfsplus: b-tree write err: -5, ino 4 [ 151.866685][ T6632] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6634] creat("./bus", 000 [pid 6629] <... futex resumed>) = 0 [pid 6636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6634] <... creat resumed>) = 4 [pid 6629] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6628] <... mmap resumed>) = 0x7efd7cefb000 [pid 6634] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6634] <... futex resumed>) = 0 [pid 6628] <... mprotect resumed>) = 0 [pid 5069] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6634] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6628] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6629] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6628] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6634] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6629] <... futex resumed>) = 0 [pid 6628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... openat resumed>) = 3 [pid 6629] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(3, "", ./strace-static-x86_64: Process 6637 attached [pid 6628] <... clone3 resumed> => {parent_tid=[6637]}, 88) = 6637 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6637] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6628] rt_sigprocmask(SIG_SETMASK, [], [pid 6637] <... rseq resumed>) = 0 [pid 6636] <... write resumed>) = 524288 [pid 6628] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] getdents64(3, [pid 6637] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6628] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6628] <... futex resumed>) = 0 [pid 5069] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6637] <... set_robust_list resumed>) = 0 [pid 6628] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6637] creat("./file1", 000 [pid 6636] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6636] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 6636] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./85/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 151.882452][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 151.904850][ T6634] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.916291][ T6632] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.927017][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 5065] newfstatat(4, "", [pid 6629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./85/bus") = 0 [pid 6628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6629] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./85/binderfs" [pid 6629] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] <... unlink resumed>) = 0 [pid 6629] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6636] <... ioctl resumed>) = 0 [pid 6636] close(3 [pid 6629] <... mprotect resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] getdents64(3, [pid 5067] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 6636] <... close resumed>) = 0 [pid 6629] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] newfstatat(AT_FDCWD, "./84/bus", [pid 5065] <... close resumed>) = 0 [pid 6636] mkdir("./bus", 0777 [pid 6629] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] rmdir("./85" [pid 5067] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6636] <... mkdir resumed>) = 0 [pid 6629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6638 attached [pid 6636] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6629] <... clone3 resumed> => {parent_tid=[6638]}, 88) = 6638 [pid 5067] <... openat resumed>) = 4 [pid 6629] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] newfstatat(4, "", [pid 6629] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] mkdir("./86", 0777 [pid 6638] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6629] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 6638] <... rseq resumed>) = 0 [pid 6629] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [ 151.941476][ T6636] loop3: detected capacity change from 0 to 1024 [ 151.944345][ T6632] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.961535][ T6634] hfsplus: request for non-existent node 16715520 in B*Tree [ 151.969144][ T6634] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6629] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6638] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6638] <... set_robust_list resumed>) = 0 [pid 5067] close(4 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6637] <... creat resumed>) = 5 [pid 5067] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5067] rmdir("./84/bus") = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5067] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6638] creat("./file1", 000 [pid 6637] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6638] <... creat resumed>) = 5 [pid 6637] <... futex resumed>) = 0 [pid 5069] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./84/binderfs", [pid 5065] close(3 [pid 6638] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6638] <... futex resumed>) = 1 [pid 6629] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6638] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] unlink("./84/binderfs") = 0 [pid 5065] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./84" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... rmdir resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./85/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6639 [pid 5069] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./85", 0777) = 0 [pid 5069] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [ 152.033501][ T6634] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.036805][ T6632] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.071467][ T6634] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6639 attached [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6640 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./85/bus") = 0 [pid 5069] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6640 attached [pid 6639] set_robust_list(0x555555fbc6a0, 24 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6640] set_robust_list(0x555555fbc6a0, 24 [pid 5069] newfstatat(AT_FDCWD, "./85/binderfs", [pid 6640] <... set_robust_list resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6640] chdir("./85" [pid 5069] unlink("./85/binderfs" [pid 6640] <... chdir resumed>) = 0 [pid 5069] <... unlink resumed>) = 0 [ 152.080409][ T6634] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6640] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6639] <... set_robust_list resumed>) = 0 [pid 5069] getdents64(3, [pid 6640] <... prctl resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6640] setpgid(0, 0 [pid 6639] chdir("./86" [pid 5069] close(3 [pid 6640] <... setpgid resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6639] <... chdir resumed>) = 0 [pid 5069] rmdir("./85" [pid 6640] <... openat resumed>) = 3 [pid 6636] <... mount resumed>) = 0 [pid 6640] write(3, "1000", 4 [pid 6639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6636] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... rmdir resumed>) = 0 [pid 6640] <... write resumed>) = 4 [pid 6639] <... prctl resumed>) = 0 [pid 5069] mkdir("./86", 0777 [pid 6640] close(3 [pid 6639] setpgid(0, 0 [pid 6636] <... openat resumed>) = 3 [pid 5069] <... mkdir resumed>) = 0 [pid 6640] <... close resumed>) = 0 [pid 6639] <... setpgid resumed>) = 0 [pid 6636] chdir("./bus" [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6640] symlink("/dev/binderfs", "./binderfs" [pid 6639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6636] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6640] <... symlink resumed>) = 0 [pid 6636] ioctl(4, LOOP_CLR_FD [pid 6634] <... write resumed>) = 57344 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6640] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] <... openat resumed>) = 3 [pid 6636] <... ioctl resumed>) = 0 [pid 6634] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 6639] write(3, "1000", 4 [pid 6636] close(4 [pid 6634] <... futex resumed>) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6640] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6639] <... write resumed>) = 4 [pid 6636] <... close resumed>) = 0 [pid 6634] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] close(3 [pid 6640] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6639] close(3 [pid 6636] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6629] exit_group(0 [pid 5069] <... close resumed>) = 0 [pid 6640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6639] <... close resumed>) = 0 [pid 6638] <... futex resumed>) = ? [pid 6636] <... futex resumed>) = 1 [pid 6635] <... futex resumed>) = 0 [pid 6634] <... futex resumed>) = ? [pid 6629] <... exit_group resumed>) = ? [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6639] symlink("/dev/binderfs", "./binderfs" [pid 6638] +++ exited with 0 +++ [pid 6636] creat("./bus", 000 [pid 6635] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6634] +++ exited with 0 +++ [pid 6629] +++ exited with 0 +++ [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6635] <... futex resumed>) = 0 [pid 6632] <... write resumed>) = 57344 [pid 6640] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6636] <... creat resumed>) = 4 [pid 6635] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6632] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6629, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6641 ./strace-static-x86_64: Process 6641 attached [pid 6640] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6639] <... symlink resumed>) = 0 [pid 6636] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6632] <... futex resumed>) = 0 [pid 6628] exit_group(0 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 6640] <... mprotect resumed>) = 0 [pid 6628] <... exit_group resumed>) = ? [pid 5070] <... restart_syscall resumed>) = 0 [pid 6640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6637] <... futex resumed>) = ? [ 152.104774][ T6632] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6641] set_robust_list(0x555555fbc6a0, 24 [pid 6639] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6637] +++ exited with 0 +++ [pid 6636] <... futex resumed>) = 0 [pid 6635] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6632] +++ exited with 0 +++ [pid 6628] +++ exited with 0 +++ [pid 6641] <... set_robust_list resumed>) = 0 [pid 6639] <... futex resumed>) = 0 [pid 6636] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6635] <... futex resumed>) = 0 [pid 5070] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6635] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6628, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5070] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6640] <... clone3 resumed> => {parent_tid=[6642]}, 88) = 6642 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... openat resumed>) = 3 [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(3, "", [pid 6640] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6640] <... futex resumed>) = 0 [pid 5070] getdents64(3, ./strace-static-x86_64: Process 6642 attached [pid 6640] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6642] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5070] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6642] <... rseq resumed>) = 0 [pid 6641] chdir("./86" [pid 6639] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6642] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5066] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6642] <... set_robust_list resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6642] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] newfstatat(3, "", [pid 6642] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6642] memfd_create("syzkaller", 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6642] <... memfd_create resumed>) = 3 [pid 6641] <... chdir resumed>) = 0 [pid 6639] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] getdents64(3, [pid 6641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6642] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6641] <... prctl resumed>) = 0 [pid 6639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(AT_FDCWD, "./86/bus", [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6639] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6639] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, [pid 6641] setpgid(0, 0 [pid 6639] <... mprotect resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./86/bus") = 0 [pid 6642] <... write resumed>) = 524288 [pid 6641] <... setpgid resumed>) = 0 [pid 6639] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6635] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./86/binderfs") = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./86") = 0 [pid 6639] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6635] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6641] <... openat resumed>) = 3 [pid 6635] <... futex resumed>) = 0 [pid 5070] mkdir("./87", 0777 [pid 6641] write(3, "1000", 4 [pid 6639] <... clone3 resumed> => {parent_tid=[6643]}, 88) = 6643 [pid 6635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6643 attached [pid 6641] <... write resumed>) = 4 [pid 6639] rt_sigprocmask(SIG_SETMASK, [], [pid 6635] <... mmap resumed>) = 0x7efd7cefb000 [pid 6643] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6641] close(3 [pid 6639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6643] <... rseq resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6643] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6643] rt_sigprocmask(SIG_SETMASK, [], [pid 6642] munmap(0x7efd74b1c000, 138412032 [pid 6643] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6642] <... munmap resumed>) = 0 [pid 6643] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6639] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... mprotect resumed>) = 0 [pid 6641] <... close resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [ 152.184192][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 152.193251][ T6636] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.211989][ T6636] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.215888][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 152.220570][ T6636] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6643] <... futex resumed>) = 0 [pid 6642] <... openat resumed>) = 4 [pid 6641] symlink("/dev/binderfs", "./binderfs" [pid 6639] <... futex resumed>) = 1 [pid 6635] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6643] memfd_create("syzkaller", 0 [pid 6642] ioctl(4, LOOP_SET_FD, 3 [pid 6639] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6643] <... memfd_create resumed>) = 3 [pid 6641] <... symlink resumed>) = 0 [pid 6635] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] close(3 [pid 6641] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 6641] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6644 attached [pid 6643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6641] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = 0 [pid 6643] <... mmap resumed>) = 0x7efd74b1c000 [pid 6643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6645 attached [pid 6644] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6642] <... ioctl resumed>) = 0 [pid 6641] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6635] <... clone3 resumed> => {parent_tid=[6644]}, 88) = 6644 [pid 5066] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6644] <... rseq resumed>) = 0 [pid 6641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6635] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6645 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6645] set_robust_list(0x555555fbc6a0, 24 [pid 6642] close(3 [pid 5066] newfstatat(AT_FDCWD, "./86/bus", [pid 6645] <... set_robust_list resumed>) = 0 [pid 6642] <... close resumed>) = 0 [pid 6645] chdir("./87" [pid 6642] mkdir("./bus", 0777 [pid 6645] <... chdir resumed>) = 0 [pid 6644] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6642] <... mkdir resumed>) = 0 [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6635] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6644] <... set_robust_list resumed>) = 0 [pid 6642] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6635] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... prctl resumed>) = 0 [pid 6644] rt_sigprocmask(SIG_SETMASK, [], [pid 6641] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6635] <... futex resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6645] setpgid(0, 0 [pid 6644] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6641] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6635] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6645] <... setpgid resumed>) = 0 [pid 6644] creat("./file1", 000 [pid 6641] <... mprotect resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 152.261512][ T6636] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.275116][ T6642] loop2: detected capacity change from 0 to 1024 [ 152.288806][ T6636] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6641] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6645] <... openat resumed>) = 3 [pid 6641] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6645] write(3, "1000", 4 [pid 6642] <... mount resumed>) = 0 [pid 6641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] newfstatat(4, "", [pid 6645] <... write resumed>) = 4 [pid 6643] <... write resumed>) = 524288 [pid 6642] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6646 attached [pid 6645] close(3 [pid 6642] <... openat resumed>) = 3 [pid 6641] <... clone3 resumed> => {parent_tid=[6646]}, 88) = 6646 [pid 5066] getdents64(4, [pid 6645] <... close resumed>) = 0 [pid 6644] <... creat resumed>) = 5 [pid 6642] chdir("./bus" [pid 6641] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6646] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6645] symlink("/dev/binderfs", "./binderfs" [pid 6644] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] munmap(0x7efd74b1c000, 138412032 [pid 6642] <... chdir resumed>) = 0 [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6636] <... write resumed>) = 57344 [pid 5066] getdents64(4, [pid 6646] <... rseq resumed>) = 0 [pid 6645] <... symlink resumed>) = 0 [pid 6644] <... futex resumed>) = 1 [pid 6643] <... munmap resumed>) = 0 [pid 6642] ioctl(4, LOOP_CLR_FD [pid 6641] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6636] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6635] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6646] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6645] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6644] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6642] <... ioctl resumed>) = 0 [pid 6641] <... futex resumed>) = 0 [pid 6636] <... futex resumed>) = 0 [pid 6635] exit_group(0 [pid 5066] close(4 [pid 6646] <... set_robust_list resumed>) = 0 [pid 6645] <... futex resumed>) = 0 [pid 6644] <... futex resumed>) = ? [pid 6643] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6642] close(4 [pid 6641] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6635] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 6646] rt_sigprocmask(SIG_SETMASK, [], [pid 6645] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6644] +++ exited with 0 +++ [pid 6643] <... openat resumed>) = 4 [pid 6642] <... close resumed>) = 0 [pid 6636] +++ exited with 0 +++ [pid 6635] +++ exited with 0 +++ [pid 5066] rmdir("./86/bus" [pid 6646] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6645] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6643] ioctl(4, LOOP_SET_FD, 3 [pid 6642] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6635, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5066] <... rmdir resumed>) = 0 [pid 6646] memfd_create("syzkaller", 0 [pid 6645] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6642] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = 0 [pid 5068] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6640] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6640] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(AT_FDCWD, "./86/binderfs", [pid 6642] creat("./bus", 000 [pid 6646] <... memfd_create resumed>) = 3 [pid 6640] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [ 152.305386][ T6636] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6642] <... creat resumed>) = 4 [pid 6646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6643] <... ioctl resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6646] <... mmap resumed>) = 0x7efd74b1c000 [pid 6645] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6643] close(3 [pid 6642] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] unlink("./86/binderfs" [pid 5068] getdents64(3, [pid 6646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6645] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6643] <... close resumed>) = 0 [pid 6642] <... futex resumed>) = 1 [pid 6640] <... futex resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6645] <... mprotect resumed>) = 0 [pid 6640] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6642] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5066] getdents64(3, [pid 6645] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6643] mkdir("./bus", 0777 [pid 6640] <... futex resumed>) = 0 [pid 5068] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6640] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] close(3) = 0 [pid 5066] rmdir("./86" [pid 6643] <... mkdir resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./87", 0777 [pid 6645] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 6645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6647]}, 88) = 6647 [pid 6645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 152.351763][ T6643] loop0: detected capacity change from 0 to 1024 [pid 6645] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6645] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6647 attached [pid 6647] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6647] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6647] memfd_create("syzkaller", 0) = 3 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6643] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6646] <... write resumed>) = 524288 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6646] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5066] close(3 [pid 6646] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6646] <... openat resumed>) = 4 [pid 6647] <... write resumed>) = 524288 [pid 6640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6646] ioctl(4, LOOP_SET_FD, 3 [pid 6640] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6648 [pid 6640] <... futex resumed>) = 0 [pid 6640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6643] <... mount resumed>) = 0 ./strace-static-x86_64: Process 6648 attached [pid 6643] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6640] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6643] <... openat resumed>) = 3 [pid 5068] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6640] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6648] set_robust_list(0x555555fbc6a0, 24 [ 152.412788][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 152.417879][ T6642] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.438272][ T6642] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6643] chdir("./bus") = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6648] <... set_robust_list resumed>) = 0 [pid 6640] <... mprotect resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6648] chdir("./87" [pid 6647] munmap(0x7efd74b1c000, 138412032 [pid 6643] ioctl(4, LOOP_CLR_FD [pid 6640] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... openat resumed>) = 4 [pid 6648] <... chdir resumed>) = 0 [pid 6647] <... munmap resumed>) = 0 [pid 6643] <... ioctl resumed>) = 0 [pid 5068] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, [pid 6643] close(4 [pid 6648] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6643] <... close resumed>) = 0 [pid 6648] <... prctl resumed>) = 0 [pid 6640] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6643] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] setpgid(0, 0 [pid 6643] <... futex resumed>) = 1 [pid 6640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6639] <... futex resumed>) = 0 [pid 6648] <... setpgid resumed>) = 0 [pid 6643] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6639] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6643] creat("./bus", 000 [pid 6639] <... futex resumed>) = 0 [pid 6639] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6649 attached [pid 6647] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6649] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6643] <... creat resumed>) = 4 [pid 6640] <... clone3 resumed> => {parent_tid=[6649]}, 88) = 6649 [pid 6649] <... rseq resumed>) = 0 [pid 6648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6647] <... openat resumed>) = 4 [pid 6640] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] getdents64(4, [pid 6649] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6640] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6649] <... set_robust_list resumed>) = 0 [pid 6647] ioctl(4, LOOP_SET_FD, 3 [pid 6649] rt_sigprocmask(SIG_SETMASK, [], [pid 6648] <... openat resumed>) = 3 [pid 6647] <... ioctl resumed>) = 0 [pid 6640] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(4 [pid 6649] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6649] creat("./file1", 000 [pid 5068] <... close resumed>) = 0 [pid 5068] rmdir("./87/bus") = 0 [pid 5068] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./87/binderfs" [pid 6643] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6640] <... futex resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6640] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6643] <... futex resumed>) = 1 [pid 6639] <... futex resumed>) = 0 [pid 6639] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(3, [pid 6639] <... futex resumed>) = 0 [pid 6639] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6643] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5068] close(3) = 0 [pid 5068] rmdir("./87") = 0 [pid 5068] mkdir("./88", 0777 [pid 6648] write(3, "1000", 4 [pid 6646] <... ioctl resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 6648] <... write resumed>) = 4 [pid 6646] close(3) = 0 [pid 6646] mkdir("./bus", 0777 [pid 6647] close(3 [pid 6646] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6647] <... close resumed>) = 0 [pid 6646] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... openat resumed>) = 3 [pid 6648] close(3 [pid 6647] mkdir("./bus", 0777 [pid 6648] <... close resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6648] symlink("/dev/binderfs", "./binderfs" [pid 6647] <... mkdir resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3 [pid 6648] <... symlink resumed>) = 0 [pid 6647] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] <... close resumed>) = 0 [pid 6646] <... mount resumed>) = 0 [pid 6646] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6646] <... openat resumed>) = 3 [pid 6646] chdir("./bus") = 0 [pid 6647] <... mount resumed>) = 0 [pid 6646] ioctl(4, LOOP_CLR_FD) = 0 [pid 6646] close(4) = 0 [pid 6646] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6641] <... futex resumed>) = 0 [pid 6646] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6641] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6647] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6641] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6650 attached [pid 6647] <... openat resumed>) = 3 [ 152.462051][ T6646] loop4: detected capacity change from 0 to 1024 [ 152.484248][ T6647] loop5: detected capacity change from 0 to 1024 [ 152.486558][ T6642] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6646] creat("./bus", 000 [pid 6641] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] set_robust_list(0x555555fbc6a0, 24 [pid 6648] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6647] chdir("./bus" [pid 6646] <... creat resumed>) = 4 [pid 6646] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6650 [pid 6650] <... set_robust_list resumed>) = 0 [pid 6648] <... futex resumed>) = 0 [pid 6647] <... chdir resumed>) = 0 [pid 6646] <... futex resumed>) = 1 [pid 6641] <... futex resumed>) = 0 [pid 6650] chdir("./88" [pid 6648] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6641] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6641] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6650] <... chdir resumed>) = 0 [pid 6647] ioctl(4, LOOP_CLR_FD [pid 6646] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6650] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6648] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6647] <... ioctl resumed>) = 0 [pid 6647] close(4 [pid 6650] <... prctl resumed>) = 0 [pid 6650] setpgid(0, 0 [pid 6647] <... close resumed>) = 0 [pid 6650] <... setpgid resumed>) = 0 [pid 6647] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6648] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6639] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6640] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6648] <... mprotect resumed>) = 0 [pid 6639] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6648] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6647] <... futex resumed>) = 1 [pid 6639] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6650] <... openat resumed>) = 3 [pid 6645] <... futex resumed>) = 0 [pid 6639] <... mprotect resumed>) = 0 [pid 6650] write(3, "1000", 4 [pid 6645] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6650] <... write resumed>) = 4 [pid 6647] creat("./bus", 000 [pid 6645] <... futex resumed>) = 0 [pid 6639] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6650] close(3 [pid 6647] <... creat resumed>) = 4 [pid 6645] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6650] <... close resumed>) = 0 [pid 6647] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] symlink("/dev/binderfs", "./binderfs" [pid 6647] <... futex resumed>) = 1 [pid 6645] <... futex resumed>) = 0 [pid 6639] <... clone3 resumed> => {parent_tid=[6651]}, 88) = 6651 [pid 6650] <... symlink resumed>) = 0 [pid 6647] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6645] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6639] rt_sigprocmask(SIG_SETMASK, [], [pid 6650] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6645] <... futex resumed>) = 0 [pid 6639] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6650] <... futex resumed>) = 0 [pid 6648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [ 152.526864][ T6643] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.543216][ T6642] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.549637][ T6646] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.562239][ T6643] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6645] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6652 attached ./strace-static-x86_64: Process 6651 attached [pid 6650] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6649] <... creat resumed>) = 5 [pid 6639] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6639] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6650] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6649] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6651] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6650] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6649] <... futex resumed>) = 0 [pid 6652] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6651] <... rseq resumed>) = 0 [pid 6650] <... mprotect resumed>) = 0 [pid 6649] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6648] <... clone3 resumed> => {parent_tid=[6652]}, 88) = 6652 [pid 6652] <... rseq resumed>) = 0 [pid 6651] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6648] rt_sigprocmask(SIG_SETMASK, [], [pid 6641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6641] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6641] <... futex resumed>) = 0 [pid 6641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6641] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6641] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6651] <... set_robust_list resumed>) = 0 [pid 6650] <... clone3 resumed> => {parent_tid=[6653]}, 88) = 6653 [pid 6641] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6651] rt_sigprocmask(SIG_SETMASK, [], [pid 6650] rt_sigprocmask(SIG_SETMASK, [], [pid 6641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6651] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6651] creat("./file1", 000 [pid 6650] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6641] <... clone3 resumed> => {parent_tid=[6654]}, 88) = 6654 [pid 6650] <... futex resumed>) = 0 [pid 6641] rt_sigprocmask(SIG_SETMASK, [], [pid 6650] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6641] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 6654 attached [pid 6648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6654] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6652] <... set_robust_list resumed>) = 0 [pid 6654] <... rseq resumed>) = 0 [pid 6648] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6653 attached [pid 6641] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6641] <... futex resumed>) = 0 [pid 6653] <... rseq resumed>) = 0 [pid 6641] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [ 152.571145][ T6643] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.583044][ T6642] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.584907][ T6647] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.590424][ T6642] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.607689][ T6646] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.611043][ T6643] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6654] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6653] rt_sigprocmask(SIG_SETMASK, [], [pid 6652] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6648] <... futex resumed>) = 0 [pid 6645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6654] <... set_robust_list resumed>) = 0 [pid 6648] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6653] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] memfd_create("syzkaller", 0 [pid 6651] <... creat resumed>) = 5 [pid 6645] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] creat("./file1", 000 [pid 6653] memfd_create("syzkaller", 0 [pid 6652] <... memfd_create resumed>) = 3 [pid 6651] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... futex resumed>) = 0 [pid 6653] <... memfd_create resumed>) = 3 [pid 6651] <... futex resumed>) = 1 [pid 6645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6639] <... futex resumed>) = 0 [pid 6653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6651] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6645] <... mmap resumed>) = 0x7efd7cefb000 [pid 6653] <... mmap resumed>) = 0x7efd74b1c000 [pid 6653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6645] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6655 attached => {parent_tid=[6655]}, 88) = 6655 [pid 6655] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6652] <... mmap resumed>) = 0x7efd74b1c000 [pid 6645] rt_sigprocmask(SIG_SETMASK, [], [pid 6655] <... rseq resumed>) = 0 [pid 6645] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6655] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6645] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6655] <... set_robust_list resumed>) = 0 [pid 6645] <... futex resumed>) = 0 [pid 6655] rt_sigprocmask(SIG_SETMASK, [], [pid 6645] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6655] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6655] creat("./file1", 000 [pid 6653] <... write resumed>) = 524288 [pid 6641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6653] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6642] <... write resumed>) = 57344 [ 152.626445][ T6646] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.644042][ T6643] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.654578][ T6647] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.668198][ T6646] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6642] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6654] <... creat resumed>) = 5 [pid 6653] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6652] <... write resumed>) = 524288 [pid 6643] <... write resumed>) = 57344 [pid 6642] <... futex resumed>) = 0 [pid 6653] <... openat resumed>) = 4 [pid 6653] ioctl(4, LOOP_SET_FD, 3 [pid 6654] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] munmap(0x7efd74b1c000, 138412032 [pid 6645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6643] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6640] exit_group(0) = ? [pid 6654] <... futex resumed>) = 0 [pid 6652] <... munmap resumed>) = 0 [pid 6649] <... futex resumed>) = ? [pid 6646] <... write resumed>) = 57344 [pid 6643] <... futex resumed>) = 0 [pid 6642] <... futex resumed>) = ? [pid 6639] exit_group(0 [pid 6654] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6646] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6642] +++ exited with 0 +++ [pid 6643] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6646] <... futex resumed>) = 0 [pid 6646] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] <... openat resumed>) = 4 [pid 6651] <... futex resumed>) = ? [pid 6649] +++ exited with 0 +++ [pid 6643] <... futex resumed>) = ? [pid 6640] +++ exited with 0 +++ [pid 6639] <... exit_group resumed>) = ? [pid 6652] ioctl(4, LOOP_SET_FD, 3 [pid 6651] +++ exited with 0 +++ [pid 6643] +++ exited with 0 +++ [pid 6641] exit_group(0 [pid 6639] +++ exited with 0 +++ [pid 6641] <... exit_group resumed>) = ? [ 152.683315][ T6643] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.691419][ T6647] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.698771][ T6646] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.704505][ T6653] loop3: detected capacity change from 0 to 1024 [ 152.713592][ T6646] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6654] <... futex resumed>) = ? [pid 6646] <... futex resumed>) = ? [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6639, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6646] +++ exited with 0 +++ [pid 6654] +++ exited with 0 +++ [pid 6641] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6640, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6641, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 5065] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6655] <... creat resumed>) = 5 [pid 6653] <... ioctl resumed>) = 0 [pid 6652] <... ioctl resumed>) = 0 [pid 5069] <... restart_syscall resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6655] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] close(3 [pid 6652] close(3 [pid 5067] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6655] <... futex resumed>) = 0 [pid 6653] <... close resumed>) = 0 [pid 6652] <... close resumed>) = 0 [pid 6655] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6653] mkdir("./bus", 0777 [pid 6652] mkdir("./bus", 0777 [pid 5069] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(3, "", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6652] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 5065] getdents64(3, [pid 6653] <... mkdir resumed>) = 0 [pid 6652] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] newfstatat(3, "", [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6653] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] getdents64(3, [pid 5067] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 152.739372][ T6647] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.747671][ T6652] loop1: detected capacity change from 0 to 1024 [ 152.765279][ T6647] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.774261][ T6647] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6653] <... mount resumed>) = 0 [pid 6653] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6653] chdir("./bus") = 0 [pid 6653] ioctl(4, LOOP_CLR_FD) = 0 [pid 6653] close(4) = 0 [pid 6653] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... mount resumed>) = 0 [pid 6653] <... futex resumed>) = 1 [pid 6650] <... futex resumed>) = 0 [pid 6652] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = 0 [pid 6653] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6650] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] <... openat resumed>) = 3 [pid 6650] <... futex resumed>) = 0 [pid 6653] creat("./bus", 000 [pid 6652] chdir("./bus" [pid 6650] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6653] <... creat resumed>) = 4 [pid 6653] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... chdir resumed>) = 0 [pid 6653] <... futex resumed>) = 1 [pid 6652] ioctl(4, LOOP_CLR_FD [pid 6650] <... futex resumed>) = 0 [pid 6653] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6652] <... ioctl resumed>) = 0 [pid 6650] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6652] close(4 [pid 6650] <... futex resumed>) = 0 [pid 6653] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6652] <... close resumed>) = 0 [pid 6650] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6652] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6648] <... futex resumed>) = 0 [pid 6652] creat("./bus", 000 [pid 6648] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6647] <... write resumed>) = 57344 [pid 5065] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6648] <... futex resumed>) = 0 [pid 6652] <... creat resumed>) = 4 [pid 6648] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6647] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6652] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6647] <... futex resumed>) = 0 [pid 6645] exit_group(0 [pid 6655] <... futex resumed>) = ? [pid 6652] <... futex resumed>) = 0 [pid 6648] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6645] <... exit_group resumed>) = ? [pid 5065] newfstatat(AT_FDCWD, "./86/bus", [pid 6655] +++ exited with 0 +++ [pid 6652] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6648] <... futex resumed>) = 0 [pid 6647] +++ exited with 0 +++ [pid 6645] +++ exited with 0 +++ [ 152.793871][ T58] hfsplus: b-tree write err: -5, ino 4 [ 152.794023][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 152.799973][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 6648] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6645, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./85/bus", [pid 5065] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... openat resumed>) = 4 [pid 6650] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6650] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6650] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 6650] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(4, "", [pid 6650] <... mprotect resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6650] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] getdents64(4, [pid 6650] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] getdents64(4, ./strace-static-x86_64: Process 6656 attached 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6656] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6650] <... clone3 resumed> => {parent_tid=[6656]}, 88) = 6656 [pid 5067] close(4 [pid 6656] <... rseq resumed>) = 0 [pid 6650] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... close resumed>) = 0 [pid 6656] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6650] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] rmdir("./85/bus" [pid 5065] getdents64(4, [pid 6650] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(AT_FDCWD, "./86/bus", [pid 5067] <... rmdir resumed>) = 0 [pid 6656] <... set_robust_list resumed>) = 0 [pid 6650] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 152.854476][ T6653] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.868221][ T6652] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.879172][ T6652] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.888637][ T58] hfsplus: b-tree write err: -5, ino 4 [ 152.895244][ T6653] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6650] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6656] rt_sigprocmask(SIG_SETMASK, [], [pid 6648] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 6656] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] creat("./file1", 000 [pid 6648] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./85/binderfs" [pid 6648] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... unlink resumed>) = 0 [pid 5065] close(4 [pid 6648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./85") = 0 [pid 5067] mkdir("./86", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6648] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] <... close resumed>) = 0 [pid 6648] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... openat resumed>) = 4 [pid 5065] rmdir("./86/bus" [pid 6648] <... mprotect resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6657 [pid 6648] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6657 attached [pid 6657] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6657] chdir("./86" [pid 6648] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(4, [pid 5065] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6657] <... chdir resumed>) = 0 [pid 6650] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] newfstatat(AT_FDCWD, "./87/bus", [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] getdents64(4, [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./86/binderfs", [pid 6657] <... prctl resumed>) = 0 [pid 6648] <... clone3 resumed> => {parent_tid=[6658]}, 88) = 6658 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6657] setpgid(0, 0 [pid 6656] <... creat resumed>) = 5 [pid 6648] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] close(4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 6658 attached [pid 6657] <... setpgid resumed>) = 0 [pid 6656] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6656] <... futex resumed>) = 0 [pid 6658] <... rseq resumed>) = 0 [pid 6657] <... openat resumed>) = 3 [pid 6656] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6658] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6657] write(3, "1000", 4 [pid 6658] <... set_robust_list resumed>) = 0 [pid 6657] <... write resumed>) = 4 [ 152.910114][ T6652] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.924059][ T6653] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.932402][ T6652] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.953158][ T6653] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] unlink("./86/binderfs" [pid 6658] rt_sigprocmask(SIG_SETMASK, [], [pid 6657] close(3 [pid 6648] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6658] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6657] <... close resumed>) = 0 [pid 6658] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6657] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6657] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 5070] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] rmdir("./86/bus" [pid 5065] getdents64(3, [pid 6657] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6657] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6648] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6658] <... futex resumed>) = 0 [pid 6657] <... mprotect resumed>) = 0 [pid 6648] <... futex resumed>) = 1 [pid 6658] creat("./file1", 000 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6657] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... openat resumed>) = 4 [pid 5069] <... rmdir resumed>) = 0 [pid 6657] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6648] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6657] <... clone3 resumed> => {parent_tid=[6659]}, 88) = 6659 ./strace-static-x86_64: Process 6659 attached [pid 6657] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] newfstatat(4, "", [pid 5069] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 6659] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6658] <... creat resumed>) = 5 [pid 6657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6658] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... write resumed>) = 57344 [pid 5070] getdents64(4, [pid 5069] newfstatat(AT_FDCWD, "./86/binderfs", [pid 5065] <... close resumed>) = 0 [pid 6658] <... futex resumed>) = 1 [pid 6653] <... write resumed>) = 57344 [pid 6652] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... rseq resumed>) = 0 [pid 6658] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6657] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6653] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6652] <... futex resumed>) = 0 [pid 6648] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] rmdir("./86" [pid 6659] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6657] <... futex resumed>) = 0 [pid 6653] <... futex resumed>) = 0 [pid 6652] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6648] exit_group(0 [pid 5070] getdents64(4, [pid 5069] unlink("./86/binderfs" [pid 6659] <... set_robust_list resumed>) = 0 [pid 6658] <... futex resumed>) = ? [pid 6657] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6650] exit_group(0 [pid 6648] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 6659] rt_sigprocmask(SIG_SETMASK, [], [pid 6658] +++ exited with 0 +++ [pid 6656] <... futex resumed>) = ? [pid 6652] <... futex resumed>) = ? [pid 6650] <... exit_group resumed>) = ? [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6659] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6656] +++ exited with 0 +++ [pid 6653] +++ exited with 0 +++ [pid 5065] mkdir("./87", 0777 [pid 6659] memfd_create("syzkaller", 0) = 3 [pid 5070] close(4 [pid 5069] getdents64(3, [pid 5065] <... mkdir resumed>) = 0 [pid 6659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] <... close resumed>) = 0 [pid 6659] <... mmap resumed>) = 0x7efd74b1c000 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6652] +++ exited with 0 +++ [pid 6648] +++ exited with 0 +++ [pid 5070] rmdir("./87/bus" [pid 5069] close(3 [pid 5070] <... rmdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6648, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5070] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] rmdir("./86" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6650] +++ exited with 0 +++ [pid 5070] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5069] <... rmdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./87", 0777 [pid 5065] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6659] <... write resumed>) = 524288 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6650, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5066] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5070] unlink("./87/binderfs") = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5066] <... openat resumed>) = 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] getdents64(3, [ 152.965882][ T6652] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.976051][ T6652] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.983968][ T6653] hfsplus: request for non-existent node 16715520 in B*Tree [ 152.992806][ T6653] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6660 attached [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(3, [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6660 [pid 6660] set_robust_list(0x555555fbc6a0, 24 [pid 5070] close(3 [pid 6660] <... set_robust_list resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] rmdir("./87" [pid 5068] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6660] chdir("./87" [pid 5068] <... openat resumed>) = 3 [pid 5070] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5066] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6660] <... chdir resumed>) = 0 [pid 5070] mkdir("./88", 0777 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6659] munmap(0x7efd74b1c000, 138412032 [pid 5070] <... mkdir resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6660] <... prctl resumed>) = 0 [pid 6659] <... munmap resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6659] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5069] close(3 [pid 6659] <... openat resumed>) = 4 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... close resumed>) = 0 [pid 6659] ioctl(4, LOOP_SET_FD, 3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6661 attached [pid 6660] setpgid(0, 0 [pid 5070] close(3 [pid 6661] set_robust_list(0x555555fbc6a0, 24 [pid 6660] <... setpgid resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6661 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6659] <... ioctl resumed>) = 0 [pid 6661] <... set_robust_list resumed>) = 0 [pid 6660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6661] chdir("./87" [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6662 [pid 6661] <... chdir resumed>) = 0 [pid 6660] <... openat resumed>) = 3 [pid 6661] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6660] write(3, "1000", 4 [pid 6661] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6662 attached [pid 6660] <... write resumed>) = 4 [pid 6661] setpgid(0, 0 [pid 6660] close(3 [pid 6662] set_robust_list(0x555555fbc6a0, 24 [pid 6661] <... setpgid resumed>) = 0 [pid 6660] <... close resumed>) = 0 [pid 6659] close(3 [pid 5066] <... umount2 resumed>) = 0 [pid 6660] symlink("/dev/binderfs", "./binderfs" [pid 6662] <... set_robust_list resumed>) = 0 [pid 6661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6660] <... symlink resumed>) = 0 [pid 6659] <... close resumed>) = 0 [pid 5066] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6660] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] mkdir("./bus", 0777 [pid 6662] chdir("./88" [pid 6661] <... openat resumed>) = 3 [pid 6660] <... futex resumed>) = 0 [pid 6659] <... mkdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6662] <... chdir resumed>) = 0 [pid 6661] write(3, "1000", 4 [pid 6660] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] newfstatat(AT_FDCWD, "./87/bus", [pid 6660] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6659] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6660] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6659] <... mount resumed>) = 0 [pid 6659] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6660] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6659] chdir("./bus" [pid 5066] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6660] <... mprotect resumed>) = 0 [pid 6659] <... chdir resumed>) = 0 [pid 6659] ioctl(4, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 4 [pid 6659] <... ioctl resumed>) = 0 [pid 6659] close(4) = 0 [pid 6662] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6659] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] <... write resumed>) = 4 [pid 6659] <... futex resumed>) = 1 [pid 6657] <... futex resumed>) = 0 [pid 6662] <... prctl resumed>) = 0 [pid 6661] close(3 [pid 6660] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6659] creat("./bus", 000 [pid 6657] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] newfstatat(4, "", [pid 6661] <... close resumed>) = 0 [pid 6659] <... creat resumed>) = 4 [pid 6657] <... futex resumed>) = 0 [pid 6662] setpgid(0, 0 [pid 6661] symlink("/dev/binderfs", "./binderfs" [pid 6660] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6659] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6657] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6662] <... setpgid resumed>) = 0 [pid 6661] <... symlink resumed>) = 0 [pid 6660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6659] <... futex resumed>) = 0 [ 153.073426][ T47] hfsplus: b-tree write err: -5, ino 4 [ 153.088133][ T6659] loop2: detected capacity change from 0 to 1024 [ 153.099949][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 6657] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(4, ./strace-static-x86_64: Process 6663 attached [pid 6662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6661] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6657] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6663] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6662] <... openat resumed>) = 3 [pid 6661] <... futex resumed>) = 0 [pid 6660] <... clone3 resumed> => {parent_tid=[6663]}, 88) = 6663 [pid 6657] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] getdents64(4, [pid 6663] <... rseq resumed>) = 0 [pid 6662] write(3, "1000", 4 [pid 6661] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6660] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6663] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6662] <... write resumed>) = 4 [pid 6661] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] close(4 [pid 6663] <... set_robust_list resumed>) = 0 [pid 6662] close(3 [pid 6661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6660] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 6663] rt_sigprocmask(SIG_SETMASK, [], [pid 6662] <... close resumed>) = 0 [pid 6661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] <... futex resumed>) = 0 [pid 5068] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./87/bus" [pid 6663] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6662] symlink("/dev/binderfs", "./binderfs" [pid 6661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6660] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] <... rmdir resumed>) = 0 [pid 6662] <... symlink resumed>) = 0 [pid 6661] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6663] memfd_create("syzkaller", 0 [pid 6662] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6662] <... futex resumed>) = 0 [pid 6661] <... mprotect resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6662] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6661] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6662] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6661] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] unlink("./87/binderfs" [pid 6662] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6664 attached [pid 6662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6664] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6661] <... clone3 resumed> => {parent_tid=[6664]}, 88) = 6664 [pid 6664] <... rseq resumed>) = 0 [pid 6662] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6661] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] getdents64(3, [pid 6664] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6663] <... memfd_create resumed>) = 3 [pid 6662] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6664] <... set_robust_list resumed>) = 0 [pid 6663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6662] <... mprotect resumed>) = 0 [pid 6661] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] rt_sigprocmask(SIG_SETMASK, [], [pid 6663] <... mmap resumed>) = 0x7efd74b1c000 [pid 6662] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6661] <... futex resumed>) = 0 [pid 5066] close(3 [pid 6664] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6662] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6661] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6664] memfd_create("syzkaller", 0 [pid 6662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 6665 attached [pid 5066] rmdir("./87" [pid 6665] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6664] <... memfd_create resumed>) = 3 [pid 6663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6662] <... clone3 resumed> => {parent_tid=[6665]}, 88) = 6665 [pid 5068] newfstatat(AT_FDCWD, "./88/bus", [pid 6665] <... rseq resumed>) = 0 [pid 6664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6662] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... rmdir resumed>) = 0 [pid 6665] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6664] <... mmap resumed>) = 0x7efd74b1c000 [pid 6662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6665] <... set_robust_list resumed>) = 0 [pid 6662] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6662] <... futex resumed>) = 0 [pid 5066] mkdir("./88", 0777 [pid 6665] memfd_create("syzkaller", 0 [pid 6664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6662] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6665] <... memfd_create resumed>) = 3 [pid 5068] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5068] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6664] <... write resumed>) = 524288 [pid 5066] <... openat resumed>) = 3 [pid 6657] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 4 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6657] <... futex resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] newfstatat(4, "", [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6666 ./strace-static-x86_64: Process 6666 attached [pid 6664] munmap(0x7efd74b1c000, 138412032 [pid 6666] set_robust_list(0x555555fbc6a0, 24 [pid 6657] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6666] <... set_robust_list resumed>) = 0 [pid 6664] <... munmap resumed>) = 0 [ 153.200229][ T6659] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6657] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6666] chdir("./88" [pid 6664] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6663] <... write resumed>) = 524288 [pid 6657] <... mprotect resumed>) = 0 [pid 5068] getdents64(4, [pid 6665] <... write resumed>) = 524288 [pid 6657] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6663] munmap(0x7efd74b1c000, 138412032 [pid 6657] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] getdents64(4, [pid 6666] <... chdir resumed>) = 0 [pid 6665] munmap(0x7efd74b1c000, 138412032 [pid 6666] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6665] <... munmap resumed>) = 0 [pid 6663] <... munmap resumed>) = 0 [pid 6657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6667 attached [pid 6666] <... prctl resumed>) = 0 [pid 5068] close(4 [pid 6666] setpgid(0, 0 [pid 6657] <... clone3 resumed> => {parent_tid=[6667]}, 88) = 6667 [pid 5068] <... close resumed>) = 0 [pid 6667] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6666] <... setpgid resumed>) = 0 [pid 6657] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] rmdir("./88/bus" [pid 6667] <... rseq resumed>) = 0 [pid 6666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6665] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6664] <... openat resumed>) = 4 [pid 6663] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6657] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6667] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6666] <... openat resumed>) = 3 [pid 6665] <... openat resumed>) = 4 [pid 6664] ioctl(4, LOOP_SET_FD, 3 [pid 6663] <... openat resumed>) = 4 [pid 6657] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rmdir resumed>) = 0 [pid 6667] <... set_robust_list resumed>) = 0 [pid 6666] write(3, "1000", 4 [pid 6665] ioctl(4, LOOP_SET_FD, 3 [pid 6663] ioctl(4, LOOP_SET_FD, 3 [pid 6657] <... futex resumed>) = 0 [pid 6667] rt_sigprocmask(SIG_SETMASK, [], [pid 6666] <... write resumed>) = 4 [pid 6657] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6667] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6666] close(3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6667] creat("./file1", 000 [pid 5068] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6666] <... close resumed>) = 0 [pid 6666] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6666] <... symlink resumed>) = 0 [pid 5068] unlink("./88/binderfs" [pid 6666] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... unlink resumed>) = 0 [pid 5068] getdents64(3, [pid 6666] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] close(3 [pid 6666] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5068] <... close resumed>) = 0 [pid 6663] <... ioctl resumed>) = 0 [pid 5068] rmdir("./88" [pid 6663] close(3 [pid 6666] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6664] <... ioctl resumed>) = 0 [pid 6663] <... close resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6664] close(3 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6664] <... close resumed>) = 0 [pid 6663] mkdir("./bus", 0777 [pid 6666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6664] mkdir("./bus", 0777 [pid 6666] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6664] <... mkdir resumed>) = 0 [pid 6663] <... mkdir resumed>) = 0 [pid 6666] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6664] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6668 attached [pid 6663] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] mkdir("./89", 0777 [pid 6668] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6666] <... clone3 resumed> => {parent_tid=[6668]}, 88) = 6668 [pid 6668] <... rseq resumed>) = 0 [pid 6666] rt_sigprocmask(SIG_SETMASK, [], [pid 6668] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6668] <... set_robust_list resumed>) = 0 [pid 6666] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] rt_sigprocmask(SIG_SETMASK, [], [pid 6666] <... futex resumed>) = 0 [ 153.254728][ T6659] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.272487][ T6664] loop4: detected capacity change from 0 to 1024 [ 153.280810][ T6663] loop0: detected capacity change from 0 to 1024 [ 153.280829][ T6665] loop5: detected capacity change from 0 to 1024 [ 153.297489][ T6659] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6668] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6666] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... mkdir resumed>) = 0 [pid 6668] memfd_create("syzkaller", 0 [pid 6665] <... ioctl resumed>) = 0 [pid 6664] <... mount resumed>) = 0 [pid 6657] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6665] close(3 [pid 6664] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6665] <... close resumed>) = 0 [pid 6664] <... openat resumed>) = 3 [pid 6665] mkdir("./bus", 0777 [pid 6664] chdir("./bus" [pid 6665] <... mkdir resumed>) = 0 [pid 6664] <... chdir resumed>) = 0 [pid 6665] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6664] ioctl(4, LOOP_CLR_FD [pid 6668] <... memfd_create resumed>) = 3 [pid 6668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6664] <... ioctl resumed>) = 0 [pid 6663] <... mount resumed>) = 0 [pid 6668] <... mmap resumed>) = 0x7efd74b1c000 [pid 6664] close(4 [pid 6663] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6664] <... close resumed>) = 0 [pid 6664] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6661] <... futex resumed>) = 0 [pid 6664] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6661] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6664] <... futex resumed>) = 0 [pid 6661] <... futex resumed>) = 1 [pid 6664] creat("./bus", 000 [pid 6668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6664] <... creat resumed>) = 4 [pid 6663] <... openat resumed>) = 3 [pid 6664] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6664] <... futex resumed>) = 0 [pid 6663] chdir("./bus" [pid 6661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6664] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6663] <... chdir resumed>) = 0 [pid 6661] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6663] ioctl(4, LOOP_CLR_FD [pid 6661] <... futex resumed>) = 0 [pid 6664] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6663] <... ioctl resumed>) = 0 [pid 6661] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 6663] close(4) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6663] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6663] <... futex resumed>) = 1 [pid 6663] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] <... futex resumed>) = 0 [pid 5068] close(3 [pid 6660] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6663] creat("./bus", 000 [pid 6660] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 6665] <... mount resumed>) = 0 [pid 6660] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6663] <... creat resumed>) = 4 [ 153.335633][ T6659] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.366158][ T6659] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6665] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6665] chdir("./bus") = 0 [pid 6665] ioctl(4, LOOP_CLR_FD [pid 6663] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... ioctl resumed>) = 0 [pid 6665] close(4) = 0 [pid 6665] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6662] <... futex resumed>) = 0 [pid 6665] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6662] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6665] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6662] <... futex resumed>) = 0 [pid 6665] creat("./bus", 000 [pid 6662] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6665] <... creat resumed>) = 4 [pid 6665] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6662] <... futex resumed>) = 0 [pid 6662] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6669 attached [pid 6668] <... write resumed>) = 524288 [pid 6665] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6663] <... futex resumed>) = 1 [pid 6662] <... futex resumed>) = 0 [pid 6660] <... futex resumed>) = 0 [pid 6668] munmap(0x7efd74b1c000, 138412032 [pid 6663] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6669 [pid 6662] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6660] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6660] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6668] <... munmap resumed>) = 0 [pid 6663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6663] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 153.383696][ T6664] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.393266][ T6659] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.411541][ T6664] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.427859][ T6663] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6668] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6669] set_robust_list(0x555555fbc6a0, 24 [pid 6668] <... openat resumed>) = 4 [pid 6667] <... creat resumed>) = 5 [pid 6661] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6659] <... write resumed>) = 57344 [pid 6659] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6659] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6661] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6668] ioctl(4, LOOP_SET_FD, 3 [pid 6669] <... set_robust_list resumed>) = 0 [pid 6667] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6661] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6669] chdir("./89" [pid 6667] <... futex resumed>) = 0 [pid 6661] <... mprotect resumed>) = 0 [pid 6667] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6669] <... chdir resumed>) = 0 [pid 6661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6661] <... clone3 resumed> => {parent_tid=[6670]}, 88) = 6670 [pid 6669] <... prctl resumed>) = 0 [pid 6661] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] setpgid(0, 0 [pid 6661] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] <... setpgid resumed>) = 0 [pid 6661] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6661] <... futex resumed>) = 0 [pid 6669] <... openat resumed>) = 3 [pid 6661] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6669] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 6670 attached [pid 6669] close(3 [pid 6662] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6669] <... close resumed>) = 0 [pid 6660] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6657] exit_group(0 [pid 6670] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6669] symlink("/dev/binderfs", "./binderfs" [pid 6668] <... ioctl resumed>) = 0 [pid 6667] <... futex resumed>) = ? [pid 6662] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6659] <... futex resumed>) = ? [pid 6657] <... exit_group resumed>) = ? [pid 6670] <... rseq resumed>) = 0 [pid 6669] <... symlink resumed>) = 0 [pid 6668] close(3 [pid 6667] +++ exited with 0 +++ [pid 6662] <... futex resumed>) = 0 [pid 6660] <... futex resumed>) = 0 [pid 6659] +++ exited with 0 +++ [pid 6670] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6669] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6668] <... close resumed>) = 0 [pid 6670] <... set_robust_list resumed>) = 0 [pid 6669] <... futex resumed>) = 0 [ 153.429189][ T6665] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.441079][ T6663] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.446289][ T6664] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.450240][ T6663] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.465088][ T6668] loop1: detected capacity change from 0 to 1024 [pid 6668] mkdir("./bus", 0777 [pid 6662] <... mmap resumed>) = 0x7efd7cefb000 [pid 6660] <... mmap resumed>) = 0x7efd7cefb000 [pid 6657] +++ exited with 0 +++ [pid 6670] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6662] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6660] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6669] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6662] <... mprotect resumed>) = 0 [pid 6660] <... mprotect resumed>) = 0 [pid 6669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6662] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6660] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6662] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6660] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6670] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6669] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6668] <... mkdir resumed>) = 0 [pid 6662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6657, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6670] creat("./file1", 000 [pid 6668] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 6671 attached [pid 6669] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6671] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6669] <... mprotect resumed>) = 0 [pid 6662] <... clone3 resumed> => {parent_tid=[6671]}, 88) = 6671 [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6662] rt_sigprocmask(SIG_SETMASK, [], [pid 6660] <... clone3 resumed> => {parent_tid=[6672]}, 88) = 6672 [pid 6669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6662] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6660] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6662] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6660] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6662] <... futex resumed>) = 0 [pid 6660] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] <... clone3 resumed> => {parent_tid=[6673]}, 88) = 6673 [pid 6662] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6660] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6672 attached [pid 6669] rt_sigprocmask(SIG_SETMASK, [], [pid 6660] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6672] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6672] <... rseq resumed>) = 0 [pid 6669] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6672] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6669] <... futex resumed>) = 0 [pid 6672] <... set_robust_list resumed>) = 0 [pid 6672] rt_sigprocmask(SIG_SETMASK, [], [pid 6669] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6673 attached [pid 6672] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6671] <... rseq resumed>) = 0 [pid 6661] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6673] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6672] creat("./file1", 000 [pid 6671] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5067] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] <... rseq resumed>) = 0 [pid 6671] <... set_robust_list resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6673] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6671] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6673] <... set_robust_list resumed>) = 0 [pid 6671] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6673] rt_sigprocmask(SIG_SETMASK, [], [pid 6671] creat("./file1", 000 [pid 6673] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 153.485944][ T6665] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.493408][ T6663] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.496429][ T6664] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.512508][ T6663] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.524175][ T6663] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6673] memfd_create("syzkaller", 0) = 3 [pid 6673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6672] <... creat resumed>) = 5 [pid 6668] <... mount resumed>) = 0 [pid 6663] <... write resumed>) = 57344 [pid 5067] newfstatat(3, "", [pid 6673] <... mmap resumed>) = 0x7efd74b1c000 [pid 6672] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6663] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6672] <... futex resumed>) = 1 [pid 6668] <... openat resumed>) = 3 [pid 6663] <... futex resumed>) = 0 [pid 6660] <... futex resumed>) = 0 [pid 5067] getdents64(3, [pid 6672] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6668] chdir("./bus" [pid 6663] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6660] exit_group(0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6672] <... futex resumed>) = ? [pid 6668] <... chdir resumed>) = 0 [pid 6663] <... futex resumed>) = ? [pid 6660] <... exit_group resumed>) = ? [pid 5067] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 153.526823][ T6665] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6672] +++ exited with 0 +++ [pid 6668] ioctl(4, LOOP_CLR_FD [pid 6663] +++ exited with 0 +++ [pid 6660] +++ exited with 0 +++ [pid 6670] <... creat resumed>) = 5 [pid 6668] <... ioctl resumed>) = 0 [pid 6662] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6660, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6670] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] close(4) = 0 [pid 6668] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6666] <... futex resumed>) = 0 [pid 5065] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6668] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6666] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6666] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6668] creat("./bus", 000 [pid 6666] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6673] <... write resumed>) = 524288 [pid 6668] <... creat resumed>) = 4 [pid 6670] <... futex resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 6670] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6668] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6668] <... futex resumed>) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6668] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6666] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 153.563175][ T6665] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.580263][ T6664] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.588841][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 153.595492][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6666] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6673] munmap(0x7efd74b1c000, 138412032 [pid 6671] <... creat resumed>) = 5 [pid 6671] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6673] <... munmap resumed>) = 0 [pid 6671] <... futex resumed>) = 0 [pid 6673] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6671] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] <... openat resumed>) = 4 [pid 6673] ioctl(4, LOOP_SET_FD, 3 [pid 6666] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6666] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6666] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [ 153.607644][ T6668] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.616266][ T6664] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.626920][ T6665] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.642045][ T6668] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.651709][ T6673] loop3: detected capacity change from 0 to 1024 [pid 6664] <... write resumed>) = 57344 [pid 5067] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6666] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6664] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6666] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6664] <... futex resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./86/bus", [pid 6666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6664] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6661] exit_group(0 [pid 5067] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6670] <... futex resumed>) = ? [pid 6666] <... clone3 resumed> => {parent_tid=[6674]}, 88) = 6674 [pid 6664] <... futex resumed>) = ? [pid 6661] <... exit_group resumed>) = ? [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6673] <... ioctl resumed>) = 0 [pid 6670] +++ exited with 0 +++ [pid 6666] rt_sigprocmask(SIG_SETMASK, [], [pid 6664] +++ exited with 0 +++ [pid 6661] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(AT_FDCWD, "./87/bus", [pid 6673] close(3./strace-static-x86_64: Process 6674 attached ) = 0 [pid 6666] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6674] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6673] mkdir("./bus", 0777 [pid 6666] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6674] <... rseq resumed>) = 0 [pid 6666] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6661, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6674] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6666] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 153.657279][ T6665] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6674] <... set_robust_list resumed>) = 0 [pid 6673] <... mkdir resumed>) = 0 [pid 5067] newfstatat(4, "", [pid 5065] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6674] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6673] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6674] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] getdents64(4, [pid 5065] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6674] creat("./file1", 000 [pid 5069] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5065] newfstatat(4, "", [pid 5069] newfstatat(3, "", [pid 5067] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] close(4 [pid 5065] getdents64(4, [pid 5069] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] rmdir("./86/bus" [pid 5065] getdents64(4, [pid 6673] <... mount resumed>) = 0 [pid 6665] <... write resumed>) = 57344 [pid 6665] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6665] <... futex resumed>) = 0 [pid 6673] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6665] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6662] exit_group(0 [pid 6665] <... futex resumed>) = ? [pid 6662] <... exit_group resumed>) = ? [pid 6665] +++ exited with 0 +++ [pid 6674] <... creat resumed>) = 5 [pid 6674] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6666] <... futex resumed>) = 0 [pid 6674] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6671] <... futex resumed>) = ? [pid 5065] close(4 [pid 6671] +++ exited with 0 +++ [pid 6673] <... openat resumed>) = 3 [pid 6662] +++ exited with 0 +++ [pid 5065] <... close resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6662, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5067] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] chdir("./bus" [pid 5065] rmdir("./87/bus" [pid 6673] <... chdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6673] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] <... ioctl resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./86/binderfs", [pid 6673] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 153.685371][ T6668] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.710450][ T58] hfsplus: b-tree write err: -5, ino 4 [ 153.715971][ T6668] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6673] <... close resumed>) = 0 [pid 5070] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./86/binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./87/binderfs" [pid 6673] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6673] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(3, [pid 5065] getdents64(3, [pid 6673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6669] <... futex resumed>) = 0 [pid 6673] creat("./bus", 000 [pid 6669] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5070] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6673] <... creat resumed>) = 4 [pid 5067] close(3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./87" [pid 5070] <... openat resumed>) = 3 [pid 5070] newfstatat(3, "", [pid 5065] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] rmdir("./86" [pid 5070] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... rmdir resumed>) = 0 [pid 5070] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6673] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6669] <... futex resumed>) = 0 [pid 6668] <... write resumed>) = 57344 [pid 5065] mkdir("./88", 0777 [pid 6673] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6669] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6668] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] <... futex resumed>) = 0 [pid 6668] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6673] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6669] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6673] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6666] exit_group(0 [pid 6674] <... futex resumed>) = ? [pid 6666] <... exit_group resumed>) = ? [pid 6674] +++ exited with 0 +++ [pid 6668] <... futex resumed>) = ? [pid 5069] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6668] +++ exited with 0 +++ [pid 6666] +++ exited with 0 +++ [pid 5069] <... openat resumed>) = 4 [pid 5069] newfstatat(4, "", [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6666, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./87/bus" [pid 5065] <... mkdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5066] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 153.729619][ T6668] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.754901][ T6668] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] newfstatat(AT_FDCWD, "./87/binderfs", [pid 5066] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] mkdir("./87", 0777 [pid 5065] close(3 [pid 5069] unlink("./87/binderfs") = 0 [pid 5066] newfstatat(3, "", [pid 5065] <... close resumed>) = 0 [pid 5069] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6675 [pid 5069] <... close resumed>) = 0 [pid 5066] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] rmdir("./87" [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5069] mkdir("./88", 0777 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] <... mkdir resumed>) = 0 [pid 5067] close(3 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5067] <... close resumed>) = 0 [ 153.802064][ T58] hfsplus: b-tree write err: -5, ino 4 [ 153.811796][ T6673] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6675 attached [pid 6669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6669] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6675] set_robust_list(0x555555fbc6a0, 24 [pid 5069] close(3 [pid 6675] <... set_robust_list resumed>) = 0 [pid 6669] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... close resumed>) = 0 [pid 6669] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6677 attached [pid 6669] <... mprotect resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6677 ./strace-static-x86_64: Process 6676 attached [pid 6677] set_robust_list(0x555555fbc6a0, 24 [pid 6675] chdir("./88" [pid 6669] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6677] <... set_robust_list resumed>) = 0 [pid 6676] set_robust_list(0x555555fbc6a0, 24 [pid 6677] chdir("./88" [pid 6675] <... chdir resumed>) = 0 [pid 6669] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6676 [pid 6676] <... set_robust_list resumed>) = 0 [pid 6677] <... chdir resumed>) = 0 [pid 6675] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6676] chdir("./87" [pid 6677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6675] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6678 attached [pid 6676] <... chdir resumed>) = 0 [ 153.846538][ T6673] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.869580][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6677] <... prctl resumed>) = 0 [pid 6675] setpgid(0, 0 [pid 6678] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6676] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6678] <... rseq resumed>) = 0 [pid 6676] <... prctl resumed>) = 0 [pid 6677] setpgid(0, 0 [pid 6675] <... setpgid resumed>) = 0 [pid 6669] <... clone3 resumed> => {parent_tid=[6678]}, 88) = 6678 [pid 6676] setpgid(0, 0 [pid 6675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6676] <... setpgid resumed>) = 0 [pid 6675] <... openat resumed>) = 3 [pid 6676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6675] write(3, "1000", 4 [pid 6676] <... openat resumed>) = 3 [pid 6675] <... write resumed>) = 4 [pid 6676] write(3, "1000", 4 [pid 6675] close(3 [pid 6676] <... write resumed>) = 4 [pid 6675] <... close resumed>) = 0 [pid 6676] close(3 [pid 6675] symlink("/dev/binderfs", "./binderfs" [pid 6676] <... close resumed>) = 0 [pid 6675] <... symlink resumed>) = 0 [pid 6676] symlink("/dev/binderfs", "./binderfs" [pid 6675] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6676] <... symlink resumed>) = 0 [pid 6677] <... setpgid resumed>) = 0 [pid 6675] <... futex resumed>) = 0 [pid 6669] rt_sigprocmask(SIG_SETMASK, [], [pid 6678] <... set_robust_list resumed>) = 0 [pid 6676] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] <... umount2 resumed>) = 0 [pid 6676] <... futex resumed>) = 0 [pid 6675] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6678] rt_sigprocmask(SIG_SETMASK, [], [pid 6676] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6675] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6676] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6675] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] newfstatat(AT_FDCWD, "./88/bus", [pid 6678] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6675] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6669] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6678] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6676] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6677] <... openat resumed>) = 3 [pid 6675] <... mprotect resumed>) = 0 [pid 6669] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6678] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 153.897385][ T6673] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6676] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6677] write(3, "1000", 4 [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6669] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 6678] creat("./file1", 000 [pid 6676] <... mprotect resumed>) = 0 [pid 6677] <... write resumed>) = 4 [pid 5070] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6676] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6675] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6678] <... creat resumed>) = 5 [pid 6676] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6677] close(3 [pid 6678] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 4 [pid 6677] <... close resumed>) = 0 ./strace-static-x86_64: Process 6679 attached [pid 6678] <... futex resumed>) = 0 [pid 6676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6677] symlink("/dev/binderfs", "./binderfs" [pid 6675] <... clone3 resumed> => {parent_tid=[6679]}, 88) = 6679 [pid 6669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6679] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6678] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] newfstatat(4, "", [pid 6679] <... rseq resumed>) = 0 [pid 6676] <... clone3 resumed> => {parent_tid=[6680]}, 88) = 6680 [pid 6675] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6679] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6676] rt_sigprocmask(SIG_SETMASK, [], [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] getdents64(4, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6679] <... set_robust_list resumed>) = 0 [pid 6676] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6675] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] newfstatat(AT_FDCWD, "./88/bus", [pid 6679] rt_sigprocmask(SIG_SETMASK, [], [pid 6676] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6675] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6680 attached [pid 6679] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6676] <... futex resumed>) = 0 [pid 6677] <... symlink resumed>) = 0 [pid 6675] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] getdents64(4, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6680] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6679] memfd_create("syzkaller", 0 [pid 6676] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6677] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6680] <... rseq resumed>) = 0 [pid 6679] <... memfd_create resumed>) = 3 [pid 6677] <... futex resumed>) = 0 [pid 5070] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6680] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6677] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] <... close resumed>) = 0 [ 153.942697][ T6673] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6680] <... set_robust_list resumed>) = 0 [pid 6679] <... mmap resumed>) = 0x7efd74b1c000 [pid 6677] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5070] rmdir("./88/bus" [pid 5066] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6677] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6680] memfd_create("syzkaller", 0 [pid 6679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] newfstatat(4, "", [pid 6680] <... memfd_create resumed>) = 3 [pid 6677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6677] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6680] <... mmap resumed>) = 0x7efd74b1c000 [pid 6677] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] getdents64(4, [pid 6677] <... mprotect resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5070] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5066] <... close resumed>) = 0 [pid 6677] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6673] <... write resumed>) = 57344 [pid 6677] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] rmdir("./88/bus" [pid 6677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6673] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6669] exit_group(0 [pid 5070] unlink("./88/binderfs"./strace-static-x86_64: Process 6681 attached ) = 0 [pid 6678] <... futex resumed>) = ? [pid 6673] <... futex resumed>) = ? [pid 6669] <... exit_group resumed>) = ? [pid 5066] <... rmdir resumed>) = 0 [pid 6681] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6678] +++ exited with 0 +++ [pid 6673] +++ exited with 0 +++ [pid 5070] getdents64(3, [pid 5066] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6681] <... rseq resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6681] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5070] close(3 [pid 6681] <... set_robust_list resumed>) = 0 [pid 6679] <... write resumed>) = 524288 [pid 6677] <... clone3 resumed> => {parent_tid=[6681]}, 88) = 6681 [pid 6669] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6681] rt_sigprocmask(SIG_SETMASK, [], [pid 6677] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6669, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5066] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6681] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6679] munmap(0x7efd74b1c000, 138412032 [pid 6677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] rmdir("./88" [pid 6681] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6679] <... munmap resumed>) = 0 [pid 6677] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6679] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6677] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5068] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./88/binderfs" [pid 6681] memfd_create("syzkaller", 0 [pid 6679] <... openat resumed>) = 4 [pid 6677] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] mkdir("./89", 0777 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6681] <... memfd_create resumed>) = 3 [pid 5068] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 6681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6679] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 6681] <... mmap resumed>) = 0x7efd74b1c000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] newfstatat(3, "", [pid 5066] close(3 [pid 6681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6680] <... write resumed>) = 524288 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 6680] munmap(0x7efd74b1c000, 138412032 [pid 5070] <... openat resumed>) = 3 [pid 5068] getdents64(3, [pid 5066] rmdir("./88" [pid 6680] <... munmap resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] <... rmdir resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 153.983332][ T6673] hfsplus: request for non-existent node 16715520 in B*Tree [ 153.990660][ T6673] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] close(3 [pid 5068] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] mkdir("./89", 0777 [pid 6681] <... write resumed>) = 524288 [pid 6680] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6679] <... ioctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6680] <... openat resumed>) = 4 [pid 6681] munmap(0x7efd74b1c000, 138412032 [pid 6679] close(3) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6682 [pid 6679] mkdir("./bus", 0777./strace-static-x86_64: Process 6682 attached [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6683 [pid 6682] set_robust_list(0x555555fbc6a0, 24 [pid 6679] <... mkdir resumed>) = 0 [pid 6679] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6682] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6683 attached [pid 6682] chdir("./89" [pid 6681] <... munmap resumed>) = 0 [pid 6680] ioctl(4, LOOP_SET_FD, 3 [pid 6683] set_robust_list(0x555555fbc6a0, 24 [pid 6681] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6682] <... chdir resumed>) = 0 [pid 6682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6682] setpgid(0, 0) = 0 [pid 6682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6682] write(3, "1000", 4) = 4 [pid 6682] close(3) = 0 [pid 6682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6682] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... set_robust_list resumed>) = 0 [pid 6682] <... futex resumed>) = 0 [pid 6681] <... openat resumed>) = 4 [pid 6683] chdir("./89") = 0 [pid 6682] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6681] ioctl(4, LOOP_SET_FD, 3 [pid 6682] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6682] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6682] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6682] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6684]}, 88) = 6684 [pid 6682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6682] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6682] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6684 attached [pid 6683] <... prctl resumed>) = 0 [pid 6681] <... ioctl resumed>) = 0 [pid 6684] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6683] setpgid(0, 0 [pid 6681] close(3 [pid 6680] <... ioctl resumed>) = 0 [pid 6679] <... mount resumed>) = 0 [pid 6684] <... rseq resumed>) = 0 [pid 6684] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6683] <... setpgid resumed>) = 0 [pid 6680] close(3 [pid 6679] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6684] memfd_create("syzkaller", 0 [pid 6683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6680] <... close resumed>) = 0 [pid 6679] <... openat resumed>) = 3 [ 154.036697][ T6679] loop0: detected capacity change from 0 to 1024 [ 154.051263][ T58] hfsplus: b-tree write err: -5, ino 4 [ 154.068547][ T6680] loop2: detected capacity change from 0 to 1024 [pid 6684] <... memfd_create resumed>) = 3 [pid 6683] <... openat resumed>) = 3 [pid 6681] <... close resumed>) = 0 [pid 6680] mkdir("./bus", 0777 [pid 6679] chdir("./bus" [pid 6683] write(3, "1000", 4 [pid 6681] mkdir("./bus", 0777 [pid 6684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6683] <... write resumed>) = 4 [pid 6681] <... mkdir resumed>) = 0 [pid 6680] <... mkdir resumed>) = 0 [pid 6679] <... chdir resumed>) = 0 [pid 6683] close(3 [pid 6681] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6679] ioctl(4, LOOP_CLR_FD [pid 6684] <... mmap resumed>) = 0x7efd74b1c000 [pid 6683] <... close resumed>) = 0 [pid 6679] <... ioctl resumed>) = 0 [pid 6683] symlink("/dev/binderfs", "./binderfs" [pid 6679] close(4 [pid 6683] <... symlink resumed>) = 0 [pid 6679] <... close resumed>) = 0 [pid 6683] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... futex resumed>) = 0 [pid 6679] <... futex resumed>) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6683] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6679] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6675] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6675] <... futex resumed>) = 0 [pid 6683] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6679] creat("./bus", 000 [pid 6675] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6679] <... creat resumed>) = 4 [pid 6683] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6683] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6681] <... mount resumed>) = 0 [pid 6679] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = 0 [pid 6683] <... mprotect resumed>) = 0 [pid 6681] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6679] <... futex resumed>) = 1 [pid 6675] <... futex resumed>) = 0 [pid 6683] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6681] <... openat resumed>) = 3 [pid 6680] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6679] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6675] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6681] chdir("./bus" [pid 6675] <... futex resumed>) = 0 [pid 6681] <... chdir resumed>) = 0 [pid 6675] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6683] <... rt_sigprocmask resumed>[], 8) = 0 [ 154.081349][ T6681] loop4: detected capacity change from 0 to 1024 [pid 6681] ioctl(4, LOOP_CLR_FD [pid 6683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6681] <... ioctl resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./89/bus", [pid 6684] <... write resumed>) = 524288 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6681] close(4) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6681] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... clone3 resumed> => {parent_tid=[6685]}, 88) = 6685 [pid 5068] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6684] munmap(0x7efd74b1c000, 138412032 [pid 5068] <... openat resumed>) = 4 [pid 6683] rt_sigprocmask(SIG_SETMASK, [], [pid 6684] <... munmap resumed>) = 0 [pid 6683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6681] <... futex resumed>) = 1 [pid 5068] newfstatat(4, "", [pid 6683] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6683] <... futex resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6684] <... openat resumed>) = 4 [pid 6683] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6681] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6677] <... futex resumed>) = 0 [pid 5068] getdents64(4, [pid 6684] ioctl(4, LOOP_SET_FD, 3 [pid 6677] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6681] <... futex resumed>) = 0 [pid 6677] <... futex resumed>) = 1 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6680] <... mount resumed>) = 0 [pid 6677] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6684] <... ioctl resumed>) = 0 [pid 6681] creat("./bus", 000 [pid 6680] <... openat resumed>) = 3 [pid 5068] getdents64(4, ./strace-static-x86_64: Process 6685 attached [pid 6681] <... creat resumed>) = 4 [pid 6680] chdir("./bus" [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6685] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6681] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6680] <... chdir resumed>) = 0 [pid 6685] <... rseq resumed>) = 0 [pid 6684] close(3 [pid 6681] <... futex resumed>) = 1 [pid 6677] <... futex resumed>) = 0 [pid 6675] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] close(4 [pid 6685] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6681] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6680] ioctl(4, LOOP_CLR_FD [pid 6677] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] <... set_robust_list resumed>) = 0 [pid 6680] <... ioctl resumed>) = 0 [pid 6677] <... futex resumed>) = 0 [pid 6685] rt_sigprocmask(SIG_SETMASK, [], [pid 6680] close(4 [pid 6677] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6685] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6680] <... close resumed>) = 0 [pid 6685] memfd_create("syzkaller", 0 [pid 6680] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] <... memfd_create resumed>) = 3 [pid 6680] <... futex resumed>) = 1 [pid 5068] <... close resumed>) = 0 [pid 6685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6680] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6676] <... futex resumed>) = 0 [pid 6675] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] <... mmap resumed>) = 0x7efd74b1c000 [pid 6676] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./89/bus" [pid 6675] <... futex resumed>) = 0 [pid 6675] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6675] <... mmap resumed>) = 0x7efd7cefb000 [pid 6676] <... futex resumed>) = 0 [pid 5068] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6675] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6676] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6675] <... mprotect resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6675] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] unlink("./89/binderfs") = 0 [pid 6675] <... rt_sigprocmask resumed>[], 8) = 0 [ 154.143591][ T6679] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.163227][ T6684] loop5: detected capacity change from 0 to 1024 [ 154.170166][ T6679] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6675] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6684] <... close resumed>) = 0 ./strace-static-x86_64: Process 6686 attached [pid 6684] mkdir("./bus", 0777 [pid 5068] getdents64(3, [pid 6686] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6675] <... clone3 resumed> => {parent_tid=[6686]}, 88) = 6686 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6686] <... rseq resumed>) = 0 [pid 6675] rt_sigprocmask(SIG_SETMASK, [], [pid 6686] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6684] <... mkdir resumed>) = 0 [pid 6675] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] close(3 [pid 6686] rt_sigprocmask(SIG_SETMASK, [], [pid 6680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6686] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6680] creat("./bus", 000 [pid 6675] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 6686] creat("./file1", 000 [pid 6685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6684] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6680] <... creat resumed>) = 4 [pid 6686] <... creat resumed>) = 5 [pid 6675] <... futex resumed>) = 0 [pid 5068] rmdir("./89" [pid 6686] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6686] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... rmdir resumed>) = 0 [pid 6675] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] mkdir("./90", 0777 [pid 6680] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6676] <... futex resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 6676] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6676] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6684] <... mount resumed>) = 0 [pid 6680] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6677] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6677] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6677] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6677] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6684] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6677] <... rt_sigprocmask resumed>[], 8) = 0 [ 154.188680][ T6681] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.205439][ T6681] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.215526][ T6679] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.232814][ T6681] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6677] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6684] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6685] <... write resumed>) = 524288 [pid 6677] <... clone3 resumed> => {parent_tid=[6687]}, 88) = 6687 ./strace-static-x86_64: Process 6687 attached [pid 6685] munmap(0x7efd74b1c000, 138412032 [pid 6684] chdir("./bus" [pid 6677] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... openat resumed>) = 3 [pid 6676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6676] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6677] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6687] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6676] <... futex resumed>) = 0 [pid 6677] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6687] <... rseq resumed>) = 0 [pid 6676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6677] <... futex resumed>) = 0 [pid 6687] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6685] <... munmap resumed>) = 0 [pid 6684] <... chdir resumed>) = 0 [pid 6676] <... mmap resumed>) = 0x7efd7cefb000 [pid 6677] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6685] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6676] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [ 154.242954][ T6679] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.250552][ T6681] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.261831][ T6679] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.263605][ T6680] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.269123][ T6679] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6687] <... set_robust_list resumed>) = 0 [pid 6685] ioctl(4, LOOP_SET_FD, 3 [pid 6684] ioctl(4, LOOP_CLR_FD [pid 6676] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6687] rt_sigprocmask(SIG_SETMASK, [], [pid 6684] <... ioctl resumed>) = 0 [pid 6681] <... write resumed>) = 57344 [pid 6679] <... write resumed>) = 57344 [pid 6676] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] close(3 [pid 6687] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6687] creat("./file1", 000) = 5 [pid 6676] <... clone3 resumed> => {parent_tid=[6688]}, 88) = 6688 [pid 6676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6676] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6676] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6688 attached [pid 6688] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6688] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6688] rt_sigprocmask(SIG_SETMASK, [], [pid 6687] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6684] close(4 [pid 5068] <... close resumed>) = 0 [pid 6687] <... futex resumed>) = 1 [pid 6677] <... futex resumed>) = 0 [pid 6688] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6687] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6684] <... close resumed>) = 0 [pid 6681] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6675] exit_group(0 [pid 6677] exit_group(0 [pid 6687] <... futex resumed>) = ? [pid 6677] <... exit_group resumed>) = ? [pid 6687] +++ exited with 0 +++ [pid 6688] creat("./file1", 000 [pid 6685] <... ioctl resumed>) = 0 [pid 6686] <... futex resumed>) = ? [pid 6684] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6681] <... futex resumed>) = ? [pid 6679] <... futex resumed>) = ? [pid 6675] <... exit_group resumed>) = ? [pid 6686] +++ exited with 0 +++ [pid 6685] close(3 [pid 6684] <... futex resumed>) = 1 [pid 6682] <... futex resumed>) = 0 [pid 6685] <... close resumed>) = 0 [pid 6682] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] mkdir("./bus", 0777 [pid 6682] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6689 attached [pid 6685] <... mkdir resumed>) = 0 [pid 6684] creat("./bus", 000 [pid 6682] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6681] +++ exited with 0 +++ [pid 6677] +++ exited with 0 +++ [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6689 [pid 6689] set_robust_list(0x555555fbc6a0, 24 [pid 6685] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6677, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6689] <... set_robust_list resumed>) = 0 [pid 6684] <... creat resumed>) = 4 [pid 5069] restart_syscall(<... resuming interrupted clone ...> [pid 6689] chdir("./90" [pid 5069] <... restart_syscall resumed>) = 0 [pid 6689] <... chdir resumed>) = 0 [pid 6684] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6679] +++ exited with 0 +++ [pid 6675] +++ exited with 0 +++ [pid 6689] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6684] <... futex resumed>) = 1 [pid 6682] <... futex resumed>) = 0 [pid 5069] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6684] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6675, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6689] <... prctl resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 154.291457][ T6681] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.299521][ T6681] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.302214][ T6685] loop1: detected capacity change from 0 to 1024 [ 154.308913][ T6680] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.322840][ T6680] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 6689] setpgid(0, 0 [pid 6684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6682] <... futex resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5065] <... restart_syscall resumed>) = 0 [pid 6684] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6682] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] newfstatat(3, "", [pid 6689] <... setpgid resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] getdents64(3, [pid 5065] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6689] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", [pid 6689] write(3, "1000", 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6689] <... write resumed>) = 4 [pid 5065] getdents64(3, [pid 6689] close(3 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6689] <... close resumed>) = 0 [pid 6689] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6689] <... symlink resumed>) = 0 [pid 6689] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6689] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6689] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6689] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6689] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6690]}, 88) = 6690 [pid 6689] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6690 attached [pid 6689] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6689] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6690] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6690] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6690] memfd_create("syzkaller", 0) = 3 [pid 6690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6685] <... mount resumed>) = 0 [pid 6685] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6685] chdir("./bus") = 0 [pid 6685] ioctl(4, LOOP_CLR_FD) = 0 [pid 6685] close(4 [pid 6688] <... creat resumed>) = 5 [pid 6685] <... close resumed>) = 0 [pid 6682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 154.356321][ T6684] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.364611][ T47] hfsplus: b-tree write err: -5, ino 4 [ 154.370953][ T58] hfsplus: b-tree write err: -5, ino 4 [ 154.385095][ T6680] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.394557][ T6684] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] <... umount2 resumed>) = 0 [pid 6688] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6682] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = 0 [pid 6688] <... futex resumed>) = 0 [pid 6690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6688] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6685] <... futex resumed>) = 1 [pid 6683] <... futex resumed>) = 0 [pid 6682] <... futex resumed>) = 0 [pid 6690] <... write resumed>) = 524288 [pid 6685] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6683] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6685] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6683] <... futex resumed>) = 0 [pid 6682] <... mmap resumed>) = 0x7efd7cefb000 [pid 6683] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6680] <... write resumed>) = 57344 [pid 6682] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6685] creat("./bus", 000 [pid 6682] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6685] <... creat resumed>) = 4 [pid 6682] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6680] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6676] exit_group(0 [pid 6688] <... futex resumed>) = ? [pid 6676] <... exit_group resumed>) = ? [pid 6688] +++ exited with 0 +++ [pid 5069] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6685] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6685] <... futex resumed>) = 1 [pid 5069] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... openat resumed>) = 4 [pid 5069] newfstatat(4, "", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(4, [pid 5065] newfstatat(AT_FDCWD, "./88/bus", [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] getdents64(4, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] close(4) = 0 [pid 5069] rmdir("./88/bus" [pid 6690] munmap(0x7efd74b1c000, 138412032 [pid 6685] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6690] <... munmap resumed>) = 0 [pid 6683] <... futex resumed>) = 0 [pid 6682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6680] <... futex resumed>) = ? [pid 5069] <... rmdir resumed>) = 0 [pid 6690] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6683] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6690] <... openat resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6690] ioctl(4, LOOP_SET_FD, 3 [pid 5069] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5065] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6691 attached [pid 6685] <... futex resumed>) = 0 [pid 6683] <... futex resumed>) = 1 [pid 6680] +++ exited with 0 +++ [pid 6676] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 154.405235][ T6680] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.413737][ T6684] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.422031][ T6680] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.443652][ T6684] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6685] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5065] <... openat resumed>) = 4 [pid 6691] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6683] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6682] <... clone3 resumed> => {parent_tid=[6691]}, 88) = 6691 [pid 5069] unlink("./88/binderfs" [pid 6691] <... rseq resumed>) = 0 [pid 6682] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... unlink resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6676, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] newfstatat(4, "", [pid 5069] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(4, [pid 5069] close(3 [pid 5067] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6691] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6682] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6682] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6691] <... set_robust_list resumed>) = 0 [pid 6682] <... futex resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 6691] rt_sigprocmask(SIG_SETMASK, [], [pid 6682] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] rmdir("./88" [pid 5067] newfstatat(3, "", [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6691] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] close(4 [pid 6691] creat("./file1", 000 [pid 6690] <... ioctl resumed>) = 0 [pid 5069] mkdir("./89", 0777 [pid 5067] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] rmdir("./88/bus" [pid 6690] close(3 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] <... rmdir resumed>) = 0 [pid 6690] <... close resumed>) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6690] mkdir("./bus", 0777 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 154.455472][ T6690] loop3: detected capacity change from 0 to 1024 [ 154.468814][ T6685] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.476379][ T6684] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] close(3 [pid 5065] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6690] <... mkdir resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] newfstatat(AT_FDCWD, "./88/binderfs", [pid 6691] <... creat resumed>) = 5 [pid 6690] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./88/binderfs"./strace-static-x86_64: Process 6692 attached [pid 6691] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... unlink resumed>) = 0 [pid 6692] set_robust_list(0x555555fbc6a0, 24 [pid 6691] <... futex resumed>) = 0 [pid 6684] <... write resumed>) = 57344 [pid 6683] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [ 154.506801][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 154.512697][ T6685] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.515476][ T6684] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6682] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] getdents64(3, [pid 6692] <... set_robust_list resumed>) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6692 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 6692] chdir("./89" [pid 5065] rmdir("./88" [pid 6691] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6683] <... futex resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6692] <... chdir resumed>) = 0 [pid 6684] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] mkdir("./89", 0777 [pid 6684] <... futex resumed>) = 0 [pid 6683] <... mmap resumed>) = 0x7efd7cefb000 [pid 6682] exit_group(0 [pid 5065] <... mkdir resumed>) = 0 [pid 6691] <... futex resumed>) = ? [pid 6683] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6682] <... exit_group resumed>) = ? [pid 6684] +++ exited with 0 +++ [pid 6692] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6691] +++ exited with 0 +++ [pid 6683] <... mprotect resumed>) = 0 [pid 6682] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6683] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6683] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6692] <... prctl resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6682, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6692] setpgid(0, 0 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6683] <... clone3 resumed> => {parent_tid=[6693]}, 88) = 6693 [pid 6692] <... setpgid resumed>) = 0 [pid 6683] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... restart_syscall resumed>) = 0 [pid 5065] close(3 [pid 6692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6683] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... close resumed>) = 0 [pid 6692] <... openat resumed>) = 3 [pid 5070] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6692] write(3, "1000", 4 [pid 6683] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6692] <... write resumed>) = 4 [pid 6683] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6693 attached [pid 6692] close(3 [pid 6690] <... mount resumed>) = 0 [pid 5070] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6692] <... close resumed>) = 0 [pid 6693] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6690] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6683] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6693] <... rseq resumed>) = 0 [ 154.547780][ T6685] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6692] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6694 attached [pid 6693] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6692] <... symlink resumed>) = 0 [pid 6690] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 6693] <... set_robust_list resumed>) = 0 [pid 5067] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6693] rt_sigprocmask(SIG_SETMASK, [], [pid 6694] set_robust_list(0x555555fbc6a0, 24 [pid 6693] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6692] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6694 [pid 6693] creat("./file1", 000 [pid 5067] newfstatat(AT_FDCWD, "./87/bus", [pid 6694] <... set_robust_list resumed>) = 0 [pid 6693] <... creat resumed>) = 5 [pid 6692] <... futex resumed>) = 0 [pid 6690] chdir("./bus" [pid 6693] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6693] <... futex resumed>) = 1 [pid 6690] <... chdir resumed>) = 0 [pid 6683] <... futex resumed>) = 0 [pid 5067] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6694] chdir("./89" [pid 6693] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6692] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6690] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6694] <... chdir resumed>) = 0 [pid 6692] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5067] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6694] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6692] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6690] <... ioctl resumed>) = 0 [pid 6694] <... prctl resumed>) = 0 [pid 6692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6690] close(4 [pid 5067] <... openat resumed>) = 4 [pid 6694] setpgid(0, 0 [pid 6692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] newfstatat(4, "", [pid 6694] <... setpgid resumed>) = 0 [pid 6692] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6692] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] getdents64(4, [pid 6692] <... mprotect resumed>) = 0 [pid 6692] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6692] <... rt_sigprocmask resumed>[], 8) = 0 [ 154.592442][ T6685] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.608041][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 5067] getdents64(4, [pid 6694] <... openat resumed>) = 3 [pid 6692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6690] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 6692] <... clone3 resumed> => {parent_tid=[6695]}, 88) = 6695 [pid 5067] rmdir("./87/bus" [pid 6690] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6695 attached [pid 6694] write(3, "1000", 4 [pid 6692] rt_sigprocmask(SIG_SETMASK, [], [pid 6694] <... write resumed>) = 4 [pid 6692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6694] close(3 [pid 6695] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6694] <... close resumed>) = 0 [pid 6692] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6694] symlink("/dev/binderfs", "./binderfs" [pid 6692] <... futex resumed>) = 0 [pid 6695] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6694] <... symlink resumed>) = 0 [pid 6692] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6690] <... futex resumed>) = 1 [pid 5067] <... rmdir resumed>) = 0 [pid 6695] <... set_robust_list resumed>) = 0 [pid 6690] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6695] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6695] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] newfstatat(AT_FDCWD, "./87/binderfs", [pid 6695] memfd_create("syzkaller", 0 [pid 6694] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6695] <... memfd_create resumed>) = 3 [pid 6694] <... futex resumed>) = 0 [pid 6695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6694] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6689] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6695] <... mmap resumed>) = 0x7efd74b1c000 [pid 6694] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6690] <... futex resumed>) = 0 [pid 6689] <... futex resumed>) = 1 [pid 5067] unlink("./87/binderfs" [pid 6694] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6690] creat("./bus", 000 [pid 6689] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 6695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6690] <... creat resumed>) = 4 [pid 6694] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6690] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(3, [pid 6694] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6690] <... futex resumed>) = 1 [pid 6689] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6690] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6689] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 6694] <... mprotect resumed>) = 0 [pid 6689] <... futex resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 6689] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] rmdir("./87" [pid 6694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./88", 0777 [pid 6694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5067] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6696 attached [pid 6695] <... write resumed>) = 524288 [pid 6694] <... clone3 resumed> => {parent_tid=[6696]}, 88) = 6696 [pid 6696] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], [pid 6696] <... rseq resumed>) = 0 [pid 6694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6696] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6694] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6696] rt_sigprocmask(SIG_SETMASK, [], [pid 6694] <... futex resumed>) = 0 [pid 6696] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6695] munmap(0x7efd74b1c000, 138412032 [pid 6696] memfd_create("syzkaller", 0 [pid 6695] <... munmap resumed>) = 0 [pid 6694] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6696] <... memfd_create resumed>) = 3 [pid 6695] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6695] <... openat resumed>) = 4 [pid 6696] <... mmap resumed>) = 0x7efd74b1c000 [pid 6695] ioctl(4, LOOP_SET_FD, 3 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6685] <... write resumed>) = 57344 [ 154.635500][ T6685] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.667578][ T6685] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6695] <... ioctl resumed>) = 0 [pid 6685] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = 0 [pid 5070] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6685] <... futex resumed>) = 0 [pid 6685] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] newfstatat(AT_FDCWD, "./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./89/bus") = 0 [pid 5070] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6695] close(3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6695] <... close resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6695] mkdir("./bus", 0777 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6696] <... write resumed>) = 524288 [pid 5070] unlink("./89/binderfs" [pid 6695] <... mkdir resumed>) = 0 [pid 6683] exit_group(0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6696] munmap(0x7efd74b1c000, 138412032 [pid 6695] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... unlink resumed>) = 0 [pid 6696] <... munmap resumed>) = 0 [pid 6693] <... futex resumed>) = ? [pid 6685] <... futex resumed>) = ? [pid 6683] <... exit_group resumed>) = ? [pid 5067] close(3 [pid 6685] +++ exited with 0 +++ [pid 5070] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 6696] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6696] <... openat resumed>) = 4 [pid 5070] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] <... close resumed>) = 0 [pid 6696] ioctl(4, LOOP_SET_FD, 3 [pid 5070] rmdir("./89" [pid 6693] +++ exited with 0 +++ [pid 6683] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6683, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5066] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6689] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6697 attached [pid 6696] <... ioctl resumed>) = 0 [pid 6689] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6697 [pid 5066] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6697] set_robust_list(0x555555fbc6a0, 24 [pid 6689] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6697] <... set_robust_list resumed>) = 0 [pid 5066] newfstatat(3, "", [pid 6697] chdir("./88" [pid 6689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6697] <... chdir resumed>) = 0 [pid 6695] <... mount resumed>) = 0 [pid 6689] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] getdents64(3, [pid 6689] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6697] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6689] <... mprotect resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6697] <... prctl resumed>) = 0 [pid 5066] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6697] setpgid(0, 0) = 0 [pid 6689] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6695] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6689] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] mkdir("./90", 0777 [pid 6689] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6698 attached [pid 6695] <... openat resumed>) = 3 [ 154.701732][ T6695] loop4: detected capacity change from 0 to 1024 [ 154.712751][ T6690] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.720082][ T6690] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.742179][ T6696] loop0: detected capacity change from 0 to 1024 [pid 5070] <... mkdir resumed>) = 0 [pid 6698] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6689] <... clone3 resumed> => {parent_tid=[6698]}, 88) = 6698 [pid 6698] <... rseq resumed>) = 0 [pid 6698] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6695] chdir("./bus" [pid 6689] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6697] <... openat resumed>) = 3 [pid 6697] write(3, "1000", 4 [pid 6695] <... chdir resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6697] <... write resumed>) = 4 [pid 6695] ioctl(4, LOOP_CLR_FD [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6695] <... ioctl resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6697] close(3 [pid 6695] close(4) = 0 [pid 6697] <... close resumed>) = 0 [pid 6695] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] symlink("/dev/binderfs", "./binderfs" [pid 6695] <... futex resumed>) = 1 [pid 6692] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6698] <... set_robust_list resumed>) = 0 [pid 6697] <... symlink resumed>) = 0 [pid 6695] creat("./bus", 000 [pid 6692] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... close resumed>) = 0 [pid 6695] <... creat resumed>) = 4 [pid 6692] <... futex resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6689] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6698] rt_sigprocmask(SIG_SETMASK, [], [pid 6692] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6698] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6696] close(3 [pid 6689] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6699 attached [pid 6698] creat("./file1", 000 [pid 6697] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6696] <... close resumed>) = 0 [pid 6695] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6689] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6697] <... futex resumed>) = 0 [pid 6696] mkdir("./bus", 0777 [pid 6695] <... futex resumed>) = 1 [pid 6692] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6699 [pid 6699] set_robust_list(0x555555fbc6a0, 24 [pid 6696] <... mkdir resumed>) = 0 [pid 6692] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6695] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6692] <... futex resumed>) = 0 [pid 6699] <... set_robust_list resumed>) = 0 [pid 6697] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6696] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6699] chdir("./90" [pid 6697] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 154.758703][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 154.771438][ T6690] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.778776][ T6690] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6692] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6699] <... chdir resumed>) = 0 [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6697] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6697] <... mprotect resumed>) = 0 [pid 6699] <... prctl resumed>) = 0 [pid 6697] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6699] setpgid(0, 0 [pid 6697] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6699] <... setpgid resumed>) = 0 [pid 6699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6698] <... creat resumed>) = 5 [pid 6698] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6689] <... futex resumed>) = 0 [pid 6698] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] <... openat resumed>) = 3 [pid 6697] <... clone3 resumed> => {parent_tid=[6700]}, 88) = 6700 [pid 6696] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6700 attached [pid 6697] rt_sigprocmask(SIG_SETMASK, [], [pid 6696] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6700] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6696] <... openat resumed>) = 3 [pid 6700] <... rseq resumed>) = 0 [pid 6697] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6700] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6697] <... futex resumed>) = 0 [pid 6696] chdir("./bus" [pid 6700] <... set_robust_list resumed>) = 0 [pid 6697] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6696] <... chdir resumed>) = 0 [pid 6700] rt_sigprocmask(SIG_SETMASK, [], [pid 6696] ioctl(4, LOOP_CLR_FD [pid 6700] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6696] <... ioctl resumed>) = 0 [pid 6700] memfd_create("syzkaller", 0 [pid 6696] close(4 [pid 6700] <... memfd_create resumed>) = 3 [pid 6696] <... close resumed>) = 0 [pid 6700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6696] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6700] <... mmap resumed>) = 0x7efd74b1c000 [pid 6696] <... futex resumed>) = 1 [pid 6694] <... futex resumed>) = 0 [ 154.804816][ T6695] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6694] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6696] creat("./bus", 000 [pid 6694] <... futex resumed>) = 0 [pid 6699] write(3, "1000", 4 [pid 6696] <... creat resumed>) = 4 [pid 6694] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6699] <... write resumed>) = 4 [pid 6696] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6699] close(3 [pid 6696] <... futex resumed>) = 0 [pid 6696] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6699] symlink("/dev/binderfs", "./binderfs" [pid 5066] newfstatat(AT_FDCWD, "./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6699] <... symlink resumed>) = 0 [pid 6694] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6692] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6694] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6692] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] <... futex resumed>) = 0 [pid 6694] <... futex resumed>) = 1 [pid 6692] <... futex resumed>) = 0 [pid 6696] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6694] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6692] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6692] <... mmap resumed>) = 0x7efd7cefb000 [pid 6699] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6692] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... openat resumed>) = 4 [pid 6699] <... futex resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 6700] <... write resumed>) = 524288 [pid 6699] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6699] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5066] getdents64(4, [pid 6699] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6692] <... mprotect resumed>) = 0 [pid 6690] <... write resumed>) = 57344 [pid 5066] close(4 [pid 6699] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6690] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... close resumed>) = 0 [pid 6690] <... futex resumed>) = 0 [ 154.840099][ T6690] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.849958][ T6695] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.864710][ T6690] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6692] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6690] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] rmdir("./89/bus" [pid 6699] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6692] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6692] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6689] exit_group(0) = ? [pid 6698] <... futex resumed>) = ? [pid 6690] <... futex resumed>) = ? [pid 6700] munmap(0x7efd74b1c000, 138412032 [pid 6690] +++ exited with 0 +++ [pid 6698] +++ exited with 0 +++ [pid 6700] <... munmap resumed>) = 0 [pid 6694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6700] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6694] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6694] <... futex resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6700] <... openat resumed>) = 4 [pid 6694] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] unlink("./89/binderfs" [pid 6699] <... mprotect resumed>) = 0 [pid 6692] <... clone3 resumed> => {parent_tid=[6701]}, 88) = 6701 ./strace-static-x86_64: Process 6701 attached [pid 6700] ioctl(4, LOOP_SET_FD, 3 [pid 6699] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6694] <... mmap resumed>) = 0x7efd7cefb000 [pid 6692] rt_sigprocmask(SIG_SETMASK, [], [pid 6689] +++ exited with 0 +++ [pid 5066] <... unlink resumed>) = 0 [pid 6701] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6699] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6692] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6701] <... rseq resumed>) = 0 [pid 6699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6694] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6692] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6689, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] getdents64(3, [pid 6701] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6692] <... futex resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 6701] <... set_robust_list resumed>) = 0 [pid 6692] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... restart_syscall resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6702 attached [ 154.888971][ T6695] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.903251][ T6696] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.910591][ T6696] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.932527][ T6700] loop2: detected capacity change from 0 to 1024 [pid 6701] rt_sigprocmask(SIG_SETMASK, [], [pid 6699] <... clone3 resumed> => {parent_tid=[6702]}, 88) = 6702 [pid 6694] <... mprotect resumed>) = 0 [pid 5066] close(3 [pid 5068] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6702] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6701] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6699] rt_sigprocmask(SIG_SETMASK, [], [pid 6702] <... rseq resumed>) = 0 [pid 6702] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6701] creat("./file1", 000 [pid 6699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6694] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... close resumed>) = 0 [pid 6702] <... set_robust_list resumed>) = 0 [pid 6699] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] rt_sigprocmask(SIG_SETMASK, [], [pid 6701] <... creat resumed>) = 5 [pid 6699] <... futex resumed>) = 0 [pid 6694] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./89" [pid 6702] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6699] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6702] memfd_create("syzkaller", 0 [pid 6694] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5068] <... openat resumed>) = 3 [pid 5066] <... rmdir resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 6702] <... memfd_create resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] mkdir("./90", 0777 [pid 5068] getdents64(3, [pid 6702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6700] <... ioctl resumed>) = 0 [pid 6694] <... clone3 resumed> => {parent_tid=[6703]}, 88) = 6703 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] <... mkdir resumed>) = 0 [pid 6702] <... mmap resumed>) = 0x7efd74b1c000 [pid 6700] close(3 [pid 6694] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6700] <... close resumed>) = 0 [pid 6694] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6700] mkdir("./bus", 0777 [pid 6694] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6700] <... mkdir resumed>) = 0 [pid 6694] <... futex resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6700] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6694] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6703 attached [pid 5066] close(3 [pid 6703] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6701] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6700] <... mount resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6703] <... rseq resumed>) = 0 [pid 6701] <... futex resumed>) = 1 [pid 6692] <... futex resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6703] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6701] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6703] <... set_robust_list resumed>) = 0 [pid 6703] rt_sigprocmask(SIG_SETMASK, [], [pid 6700] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6704 ./strace-static-x86_64: Process 6704 attached [pid 6703] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6700] <... openat resumed>) = 3 [pid 6704] set_robust_list(0x555555fbc6a0, 24 [pid 6700] chdir("./bus" [pid 6704] <... set_robust_list resumed>) = 0 [pid 6700] <... chdir resumed>) = 0 [pid 6704] chdir("./90" [ 154.941417][ T6695] hfsplus: request for non-existent node 16715520 in B*Tree [ 154.981631][ T6696] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6700] ioctl(4, LOOP_CLR_FD [pid 6704] <... chdir resumed>) = 0 [pid 6700] <... ioctl resumed>) = 0 [pid 6703] creat("./file1", 000 [pid 6702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6700] close(4) = 0 [pid 6700] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6700] <... futex resumed>) = 1 [pid 6697] <... futex resumed>) = 0 [pid 6704] setpgid(0, 0 [pid 6700] creat("./bus", 000 [pid 6697] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... setpgid resumed>) = 0 [pid 6700] <... creat resumed>) = 4 [pid 6704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6700] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6697] <... futex resumed>) = 0 [pid 6704] <... openat resumed>) = 3 [pid 6700] <... futex resumed>) = 0 [pid 6697] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] write(3, "1000", 4 [pid 6700] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6697] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6704] <... write resumed>) = 4 [pid 6694] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6704] close(3 [pid 6700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6697] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... close resumed>) = 0 [pid 6700] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6697] <... futex resumed>) = 0 [pid 6704] symlink("/dev/binderfs", "./binderfs" [pid 6697] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6704] <... symlink resumed>) = 0 [pid 6704] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... write resumed>) = 524288 [pid 6704] <... futex resumed>) = 0 [ 154.984149][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 154.989104][ T6695] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.014277][ T6696] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.033911][ T6700] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6704] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6702] munmap(0x7efd74b1c000, 138412032 [pid 6704] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6702] <... munmap resumed>) = 0 [pid 6702] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6704] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6702] <... openat resumed>) = 4 [pid 6702] ioctl(4, LOOP_SET_FD, 3 [pid 6704] <... mprotect resumed>) = 0 [pid 6704] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6705]}, 88) = 6705 [pid 6704] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6705 attached NULL, 8) = 0 [pid 6705] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6704] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6703] <... creat resumed>) = 5 [pid 6702] <... ioctl resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6703] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] close(3 [pid 6703] <... futex resumed>) = 0 [pid 6703] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6704] <... futex resumed>) = 0 [pid 6697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6705] <... rseq resumed>) = 0 [pid 6704] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6697] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] <... close resumed>) = 0 [pid 5068] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6705] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6702] mkdir("./bus", 0777 [pid 6697] <... futex resumed>) = 0 [pid 6705] <... set_robust_list resumed>) = 0 [pid 6697] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6705] rt_sigprocmask(SIG_SETMASK, [], [pid 6697] <... mmap resumed>) = 0x7efd7cefb000 [pid 6705] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6697] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6695] <... write resumed>) = 57344 [pid 6705] memfd_create("syzkaller", 0 [pid 6697] <... mprotect resumed>) = 0 [pid 6695] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... memfd_create resumed>) = 3 [pid 6697] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6695] <... futex resumed>) = 0 [pid 6705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6697] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6695] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6705] <... mmap resumed>) = 0x7efd74b1c000 [pid 6697] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6702] <... mkdir resumed>) = 0 [pid 6692] exit_group(0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6702] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6701] <... futex resumed>) = ? [pid 6695] <... futex resumed>) = ? [pid 6692] <... exit_group resumed>) = ? [pid 5068] newfstatat(AT_FDCWD, "./90/bus", [pid 6701] +++ exited with 0 +++ [pid 6695] +++ exited with 0 +++ [pid 6692] +++ exited with 0 +++ [ 155.043208][ T6695] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.054178][ T6702] loop5: detected capacity change from 0 to 1024 [ 155.059890][ T6700] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.068639][ T6696] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6706 attached [pid 6705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6697] <... clone3 resumed> => {parent_tid=[6706]}, 88) = 6706 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6706] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6697] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6692, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6706] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6697] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6697] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6706] <... set_robust_list resumed>) = 0 [pid 6705] <... write resumed>) = 524288 [pid 6697] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6706] rt_sigprocmask(SIG_SETMASK, [], [pid 6697] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] newfstatat(4, "", [pid 6706] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6706] creat("./file1", 000 [pid 5069] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] getdents64(4, [pid 6696] <... write resumed>) = 57344 [pid 6696] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6696] <... futex resumed>) = 0 [pid 6694] exit_group(0 [pid 5069] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6703] <... futex resumed>) = ? [pid 6694] <... exit_group resumed>) = ? [pid 5069] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] newfstatat(3, "", [pid 6703] +++ exited with 0 +++ [pid 6702] <... mount resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, [pid 6702] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6696] +++ exited with 0 +++ [pid 6694] +++ exited with 0 +++ [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6694, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 6702] <... openat resumed>) = 3 [pid 5068] close(4) = 0 [pid 6702] chdir("./bus" [pid 5065] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./90/bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6702] <... chdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 6702] ioctl(4, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6702] <... ioctl resumed>) = 0 [ 155.088810][ T6696] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.112473][ T6700] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6705] munmap(0x7efd74b1c000, 138412032 [pid 6702] close(4 [pid 5068] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6705] <... munmap resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6705] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6705] <... openat resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6705] ioctl(4, LOOP_SET_FD, 3 [pid 5068] unlink("./90/binderfs" [pid 6702] <... close resumed>) = 0 [pid 6702] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... unlink resumed>) = 0 [pid 6702] <... futex resumed>) = 1 [pid 6699] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 6699] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6699] <... futex resumed>) = 0 [pid 6706] <... creat resumed>) = 5 [pid 6699] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] close(3 [pid 6706] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] creat("./bus", 000 [pid 6697] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... close resumed>) = 0 [pid 6706] <... futex resumed>) = 0 [pid 6706] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] rmdir("./90" [pid 6702] <... creat resumed>) = 4 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [ 155.141453][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 155.151678][ T6700] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.162504][ T6705] loop1: detected capacity change from 0 to 1024 [ 155.170346][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6702] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... ioctl resumed>) = 0 [pid 6702] <... futex resumed>) = 1 [pid 6699] <... futex resumed>) = 0 [pid 5068] mkdir("./91", 0777 [pid 6702] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6699] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] close(3 [pid 6699] <... futex resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 6702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6699] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6705] <... close resumed>) = 0 [pid 6702] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6705] mkdir("./bus", 0777) = 0 [pid 6705] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 6705] <... mount resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6705] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] newfstatat(AT_FDCWD, "./89/bus", [pid 6705] chdir("./bus") = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6705] ioctl(4, LOOP_CLR_FD) = 0 [pid 6705] close(4) = 0 [pid 6705] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6704] <... futex resumed>) = 0 [pid 6705] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6704] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6704] <... futex resumed>) = 0 [pid 6705] creat("./bus", 000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6705] <... creat resumed>) = 4 [pid 6704] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6705] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5068] close(3 [pid 6705] <... futex resumed>) = 0 [pid 6704] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6705] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6704] <... futex resumed>) = 0 [pid 5065] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6704] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 155.193966][ T6700] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.226266][ T6700] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 6699] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 6699] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] newfstatat(4, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6699] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] getdents64(4, ./strace-static-x86_64: Process 6707 attached [pid 6699] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6707 [pid 5065] getdents64(4, [pid 6707] set_robust_list(0x555555fbc6a0, 24 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6707] <... set_robust_list resumed>) = 0 [pid 5065] getdents64(4, [pid 6707] chdir("./91" [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6707] <... chdir resumed>) = 0 [pid 5065] close(4 [pid 6707] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... close resumed>) = 0 [pid 6707] <... prctl resumed>) = 0 [pid 5065] rmdir("./89/bus") = 0 [pid 5065] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6707] setpgid(0, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6707] <... setpgid resumed>) = 0 [pid 5065] unlink("./89/binderfs") = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./89") = 0 [pid 5065] mkdir("./90", 0777 [pid 6699] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] getdents64(4, [pid 6707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6700] <... write resumed>) = 57344 [pid 5065] <... mkdir resumed>) = 0 [pid 6707] <... openat resumed>) = 3 [pid 6700] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6700] <... futex resumed>) = 0 [pid 6697] exit_group(0 [pid 6706] <... futex resumed>) = ? [pid 6697] <... exit_group resumed>) = ? [pid 5065] <... openat resumed>) = 3 [pid 6706] +++ exited with 0 +++ [pid 6700] +++ exited with 0 +++ [pid 6699] <... mprotect resumed>) = 0 [pid 6697] +++ exited with 0 +++ [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6699] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] close(4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6697, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5069] <... close resumed>) = 0 [pid 5065] close(3) = 0 [ 155.243802][ T6702] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.256269][ T6705] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6707] write(3, "1000", 4 [pid 6704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6699] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] rmdir("./89/bus" [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 6707] <... write resumed>) = 4 [pid 6704] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] close(3 [pid 6704] <... futex resumed>) = 0 [pid 6707] <... close resumed>) = 0 [pid 6704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6707] symlink("/dev/binderfs", "./binderfs" [pid 6704] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6708 [pid 6707] <... symlink resumed>) = 0 [pid 6704] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 6708 attached [pid 6707] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6704] <... mprotect resumed>) = 0 [pid 6699] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... rmdir resumed>) = 0 [pid 6708] set_robust_list(0x555555fbc6a0, 24 [pid 6707] <... futex resumed>) = 0 [pid 6704] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6708] <... set_robust_list resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6709 attached [pid 6709] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6699] <... clone3 resumed> => {parent_tid=[6709]}, 88) = 6709 [pid 5069] newfstatat(AT_FDCWD, "./89/binderfs", [pid 5067] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6709] <... rseq resumed>) = 0 [pid 6709] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6709] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6704] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6708] chdir("./90" [pid 6704] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6708] <... chdir resumed>) = 0 [pid 6699] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6707] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6704] <... clone3 resumed> => {parent_tid=[6710]}, 88) = 6710 [pid 6699] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] unlink("./89/binderfs" [pid 5067] <... openat resumed>) = 3 [pid 6707] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6704] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] newfstatat(3, "", [pid 6707] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6704] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6699] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... unlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6704] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6709] <... futex resumed>) = 0 [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6704] <... futex resumed>) = 0 [pid 6699] <... futex resumed>) = 1 [pid 5069] getdents64(3, [pid 5067] getdents64(3, [pid 6709] creat("./file1", 000 [pid 6707] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6704] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6710 attached [pid 6709] <... creat resumed>) = 5 [pid 6708] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6699] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6710] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6709] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] <... prctl resumed>) = 0 [pid 6707] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6709] <... futex resumed>) = 0 [pid 6708] setpgid(0, 0 [pid 6707] <... mprotect resumed>) = 0 [pid 6709] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6708] <... setpgid resumed>) = 0 [pid 6707] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6710] <... rseq resumed>) = 0 [pid 6708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6707] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6710] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6708] <... openat resumed>) = 3 [pid 6707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6710] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] write(3, "1000", 4 [pid 6710] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] <... write resumed>) = 4 [pid 6710] creat("./file1", 000 [pid 6708] close(3 [pid 6707] <... clone3 resumed> => {parent_tid=[6711]}, 88) = 6711 [pid 6708] <... close resumed>) = 0 [pid 6707] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] close(3 [pid 5067] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6708] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] <... futex resumed>) = 0 [pid 6708] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6707] <... futex resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 6708] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6707] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6708] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 155.291704][ T6702] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.301769][ T6705] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.309394][ T6705] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.325554][ T6702] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5069] rmdir("./89" [pid 6708] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6708] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6711 attached [], 8) = 0 [pid 6711] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6711] <... rseq resumed>) = 0 [pid 6711] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6708] <... clone3 resumed> => {parent_tid=[6712]}, 88) = 6712 [pid 6711] <... set_robust_list resumed>) = 0 [pid 6708] rt_sigprocmask(SIG_SETMASK, [], [pid 6711] rt_sigprocmask(SIG_SETMASK, [], [pid 6708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6711] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6708] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6712 attached [pid 6711] memfd_create("syzkaller", 0 [pid 6708] <... futex resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6712] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6711] <... memfd_create resumed>) = 3 [pid 6708] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6712] <... rseq resumed>) = 0 [pid 6711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6712] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6711] <... mmap resumed>) = 0x7efd74b1c000 [pid 6712] <... set_robust_list resumed>) = 0 [pid 5069] mkdir("./90", 0777 [pid 6712] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6712] memfd_create("syzkaller", 0 [pid 5069] <... mkdir resumed>) = 0 [pid 6712] <... memfd_create resumed>) = 3 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5069] <... openat resumed>) = 3 [pid 6712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5069] close(3 [pid 6704] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6711] <... write resumed>) = 524288 [pid 5069] <... close resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6712] <... write resumed>) = 524288 [pid 6710] <... creat resumed>) = 5 [pid 6710] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 155.341859][ T58] hfsplus: b-tree write err: -5, ino 4 [ 155.343181][ T6705] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.375181][ T6702] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6710] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6713 attached [pid 6713] set_robust_list(0x555555fbc6a0, 24 [pid 6712] munmap(0x7efd74b1c000, 138412032 [pid 6713] <... set_robust_list resumed>) = 0 [pid 6712] <... munmap resumed>) = 0 [pid 6713] chdir("./90" [pid 6712] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6713 [pid 6713] <... chdir resumed>) = 0 [pid 6712] <... openat resumed>) = 4 [pid 5067] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6713] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6712] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6713] <... prctl resumed>) = 0 [pid 6711] munmap(0x7efd74b1c000, 138412032 [pid 6713] setpgid(0, 0) = 0 [pid 6713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] newfstatat(AT_FDCWD, "./88/bus", [pid 6713] <... openat resumed>) = 3 [pid 6713] write(3, "1000", 4) = 4 [pid 6711] <... munmap resumed>) = 0 [pid 6713] close(3 [pid 6711] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6713] <... close resumed>) = 0 [pid 6711] <... openat resumed>) = 4 [pid 6713] symlink("/dev/binderfs", "./binderfs" [pid 6711] ioctl(4, LOOP_SET_FD, 3 [pid 6713] <... symlink resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6713] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6713] <... futex resumed>) = 0 [pid 6713] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6713] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5067] newfstatat(4, "", [pid 6713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6713] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6712] <... ioctl resumed>) = 0 [ 155.400392][ T6705] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.424076][ T6712] loop0: detected capacity change from 0 to 1024 [ 155.432641][ T6702] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.437471][ T6711] loop3: detected capacity change from 0 to 1024 [pid 6713] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6712] close(3 [pid 6713] <... mprotect resumed>) = 0 [pid 6712] <... close resumed>) = 0 [pid 6713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6712] mkdir("./bus", 0777 [pid 5067] getdents64(4, [pid 6713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6712] <... mkdir resumed>) = 0 [pid 6713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6712] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6714 attached [pid 6714] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6713] <... clone3 resumed> => {parent_tid=[6714]}, 88) = 6714 [pid 6714] <... rseq resumed>) = 0 [pid 6713] rt_sigprocmask(SIG_SETMASK, [], [pid 6712] <... mount resumed>) = 0 [pid 5067] getdents64(4, [pid 6714] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6713] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6712] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6711] <... ioctl resumed>) = 0 [pid 6705] <... write resumed>) = 57344 [pid 6714] <... set_robust_list resumed>) = 0 [pid 6713] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] <... openat resumed>) = 3 [pid 6711] close(3 [pid 6705] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] rt_sigprocmask(SIG_SETMASK, [], [pid 6713] <... futex resumed>) = 0 [pid 6712] chdir("./bus" [pid 6711] <... close resumed>) = 0 [pid 6714] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6713] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6712] <... chdir resumed>) = 0 [pid 6711] mkdir("./bus", 0777 [pid 6705] <... futex resumed>) = 0 [pid 6714] memfd_create("syzkaller", 0 [pid 6712] ioctl(4, LOOP_CLR_FD [ 155.447248][ T6705] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6705] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6704] exit_group(0 [pid 6714] <... memfd_create resumed>) = 3 [pid 6712] <... ioctl resumed>) = 0 [pid 6711] <... mkdir resumed>) = 0 [pid 6710] <... futex resumed>) = ? [pid 6705] <... futex resumed>) = ? [pid 6704] <... exit_group resumed>) = ? [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6712] close(4 [pid 6710] +++ exited with 0 +++ [pid 6705] +++ exited with 0 +++ [pid 6704] +++ exited with 0 +++ [pid 5067] close(4 [pid 6714] <... mmap resumed>) = 0x7efd74b1c000 [pid 6712] <... close resumed>) = 0 [pid 6711] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] <... close resumed>) = 0 [pid 6714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6712] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] rmdir("./88/bus" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6704, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6712] <... futex resumed>) = 1 [pid 6708] <... futex resumed>) = 0 [pid 6708] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6712] creat("./bus", 000 [pid 6708] <... futex resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./88/binderfs", [pid 5066] <... openat resumed>) = 3 [pid 6714] <... write resumed>) = 524288 [pid 6712] <... creat resumed>) = 4 [pid 6708] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] newfstatat(3, "", [pid 6711] <... mount resumed>) = 0 [pid 5067] unlink("./88/binderfs" [pid 6711] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6711] <... openat resumed>) = 3 [pid 5067] <... unlink resumed>) = 0 [pid 6711] chdir("./bus" [pid 5066] getdents64(3, [pid 6711] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [ 155.470920][ T6702] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6712] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6711] ioctl(4, LOOP_CLR_FD [pid 5067] getdents64(3, [pid 5066] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6712] <... futex resumed>) = 1 [pid 6711] <... ioctl resumed>) = 0 [pid 6708] <... futex resumed>) = 0 [pid 6702] <... write resumed>) = 57344 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6712] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6711] close(4 [pid 6708] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(3 [pid 6714] munmap(0x7efd74b1c000, 138412032 [pid 6711] <... close resumed>) = 0 [pid 6708] <... futex resumed>) = 0 [pid 6702] <... futex resumed>) = 0 [pid 6714] <... munmap resumed>) = 0 [pid 6711] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6708] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... close resumed>) = 0 [pid 6699] exit_group(0 [pid 6714] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6711] <... futex resumed>) = 1 [pid 6709] <... futex resumed>) = ? [pid 6707] <... futex resumed>) = 0 [pid 6699] <... exit_group resumed>) = ? [pid 5067] rmdir("./88" [pid 6714] <... openat resumed>) = 4 [pid 6711] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6709] +++ exited with 0 +++ [pid 6707] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] ioctl(4, LOOP_SET_FD, 3 [pid 6711] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6707] <... futex resumed>) = 0 [pid 6711] creat("./bus", 000 [pid 6707] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... rmdir resumed>) = 0 [pid 6711] <... creat resumed>) = 4 [ 155.516801][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 155.532267][ T6712] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.544879][ T6712] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6711] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6702] +++ exited with 0 +++ [pid 6699] +++ exited with 0 +++ [pid 6711] <... futex resumed>) = 1 [pid 6707] <... futex resumed>) = 0 [pid 6707] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6699, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5067] mkdir("./89", 0777 [pid 5066] <... umount2 resumed>) = 0 [pid 6711] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6707] <... futex resumed>) = 0 [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 6707] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... restart_syscall resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5070] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(AT_FDCWD, "./90/bus", [pid 6714] <... ioctl resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6714] close(3 [pid 6708] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] newfstatat(3, "", [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6714] <... close resumed>) = 0 [pid 6708] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6714] mkdir("./bus", 0777 [pid 6708] <... futex resumed>) = 0 [pid 6714] <... mkdir resumed>) = 0 [pid 6708] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] getdents64(3, [pid 5066] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 155.566779][ T6714] loop4: detected capacity change from 0 to 1024 [ 155.576210][ T6712] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.596272][ T6711] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6714] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6708] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6715 ./strace-static-x86_64: Process 6715 attached [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] <... openat resumed>) = 4 [pid 6708] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6715] set_robust_list(0x555555fbc6a0, 24 [pid 6708] <... mprotect resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 6715] <... set_robust_list resumed>) = 0 [pid 6708] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6715] chdir("./89" [pid 6708] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6707] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6715] <... chdir resumed>) = 0 [pid 6707] <... futex resumed>) = 0 [pid 5066] getdents64(4, [pid 6707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6714] <... mount resumed>) = 0 [pid 6708] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6707] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] getdents64(4, [pid 6707] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6708] <... clone3 resumed> => {parent_tid=[6716]}, 88) = 6716 [pid 6707] <... mprotect resumed>) = 0 [pid 5066] close(4 [pid 6708] rt_sigprocmask(SIG_SETMASK, [], [pid 6707] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... close resumed>) = 0 [pid 6708] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6707] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] rmdir("./90/bus" [pid 6714] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6708] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6707] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6716 attached [pid 5066] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6717 attached [pid 6716] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6707] <... clone3 resumed> => {parent_tid=[6717]}, 88) = 6717 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6717] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6716] <... rseq resumed>) = 0 [pid 6707] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6716] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6707] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6717] <... rseq resumed>) = 0 [pid 6716] <... set_robust_list resumed>) = 0 [pid 6707] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] unlink("./90/binderfs" [pid 6717] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6716] rt_sigprocmask(SIG_SETMASK, [], [pid 6707] <... futex resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6717] <... set_robust_list resumed>) = 0 [pid 6716] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6707] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] getdents64(3, [pid 6717] rt_sigprocmask(SIG_SETMASK, [], [pid 6716] creat("./file1", 000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6717] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] close(3 [pid 6717] creat("./file1", 000 [pid 5066] <... close resumed>) = 0 [pid 6716] <... creat resumed>) = 5 [pid 6715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6714] <... openat resumed>) = 3 [pid 6708] <... futex resumed>) = 0 [pid 5066] rmdir("./90" [pid 6716] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... prctl resumed>) = 0 [pid 6714] chdir("./bus" [pid 6708] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... rmdir resumed>) = 0 [pid 6716] <... futex resumed>) = 0 [pid 6715] setpgid(0, 0 [pid 6714] <... chdir resumed>) = 0 [pid 6708] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] mkdir("./91", 0777 [pid 6716] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] <... setpgid resumed>) = 0 [pid 6714] ioctl(4, LOOP_CLR_FD [pid 5066] <... mkdir resumed>) = 0 [pid 6715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6714] <... ioctl resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6714] close(4 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6714] <... close resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6714] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 6714] <... futex resumed>) = 1 [pid 6713] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6715] <... openat resumed>) = 3 [pid 6714] creat("./bus", 000 [ 155.629637][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 155.635800][ T6712] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.651390][ T6711] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6713] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6715] write(3, "1000", 4 [pid 6714] <... creat resumed>) = 4 [pid 6713] <... futex resumed>) = 0 [pid 6715] <... write resumed>) = 4 [pid 6714] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6713] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6713] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6714] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6715] close(3) = 0 [pid 6713] <... futex resumed>) = 0 [pid 6715] symlink("/dev/binderfs", "./binderfs" [pid 6713] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6718 attached [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6718 [pid 6718] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6718] chdir("./91") = 0 [pid 6718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6718] setpgid(0, 0) = 0 [pid 6718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6715] <... symlink resumed>) = 0 [pid 6707] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... umount2 resumed>) = 0 [pid 6718] write(3, "1000", 4) = 4 [pid 6718] close(3) = 0 [pid 6718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6718] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6718] <... futex resumed>) = 0 [pid 6718] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6715] <... futex resumed>) = 0 [pid 6718] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6715] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6718] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6715] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6715] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6718] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6718] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6718] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6715] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6712] <... write resumed>) = 57344 [pid 6718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6715] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6712] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... mprotect resumed>) = 0 [pid 6712] <... futex resumed>) = 0 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6712] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 155.679979][ T6712] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.699572][ T6712] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.708712][ T6711] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6708] exit_group(0./strace-static-x86_64: Process 6719 attached [pid 6718] <... clone3 resumed> => {parent_tid=[6719]}, 88) = 6719 [pid 6716] <... futex resumed>) = ? [pid 6715] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6712] <... futex resumed>) = ? [pid 6708] <... exit_group resumed>) = ? [pid 6716] +++ exited with 0 +++ [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6713] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6712] +++ exited with 0 +++ [pid 6708] +++ exited with 0 +++ [pid 6719] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6718] rt_sigprocmask(SIG_SETMASK, [], [pid 6713] <... futex resumed>) = 0 [pid 6719] <... rseq resumed>) = 0 [pid 6718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6713] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6708, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6719] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6718] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... set_robust_list resumed>) = 0 [pid 6713] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6720 attached [pid 6719] rt_sigprocmask(SIG_SETMASK, [], [pid 6718] <... futex resumed>) = 0 [pid 6713] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6720] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6719] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6718] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6715] <... clone3 resumed> => {parent_tid=[6720]}, 88) = 6720 [pid 6719] memfd_create("syzkaller", 0 [pid 5065] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6713] <... mprotect resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6719] <... memfd_create resumed>) = 3 [pid 6713] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] newfstatat(3, "", [pid 6719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6713] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6719] <... mmap resumed>) = 0x7efd74b1c000 [pid 6713] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] getdents64(3, [pid 6719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6713] <... clone3 resumed> => {parent_tid=[6721]}, 88) = 6721 [pid 5065] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6721 attached [pid 6717] <... creat resumed>) = 5 [pid 6713] rt_sigprocmask(SIG_SETMASK, [], [pid 6721] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6717] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6713] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 155.729157][ T6711] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.761473][ T6714] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.769573][ T6714] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6721] <... rseq resumed>) = 0 [pid 6717] <... futex resumed>) = 0 [pid 6713] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6721] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6717] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6713] <... futex resumed>) = 0 [pid 6721] <... set_robust_list resumed>) = 0 [pid 6713] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6721] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6721] creat("./file1", 000 [pid 6720] <... rseq resumed>) = 0 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] newfstatat(AT_FDCWD, "./90/bus", [pid 6720] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6715] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6720] rt_sigprocmask(SIG_SETMASK, [], [pid 6715] <... futex resumed>) = 0 [pid 5070] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6720] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6715] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6720] memfd_create("syzkaller", 0 [pid 6719] <... write resumed>) = 524288 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6720] <... memfd_create resumed>) = 3 [pid 5070] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6713] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 155.779072][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 155.791701][ T6711] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] newfstatat(4, "", [pid 6719] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6721] <... creat resumed>) = 5 [pid 6720] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6719] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 6719] ioctl(4, LOOP_SET_FD, 3 [pid 6720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6721] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] getdents64(4, [pid 6721] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4) = 0 [pid 5070] rmdir("./90/bus" [pid 5065] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] <... rmdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./90/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6719] <... ioctl resumed>) = 0 [pid 6711] <... write resumed>) = 57344 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6719] close(3 [pid 5065] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] unlink("./90/binderfs" [pid 6720] <... write resumed>) = 524288 [pid 5065] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] <... unlink resumed>) = 0 [pid 6719] <... close resumed>) = 0 [pid 6720] munmap(0x7efd74b1c000, 138412032 [pid 6711] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 4 [pid 5070] getdents64(3, [pid 6719] mkdir("./bus", 0777 [pid 6711] <... futex resumed>) = 0 [pid 6720] <... munmap resumed>) = 0 [pid 6719] <... mkdir resumed>) = 0 [pid 6711] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] newfstatat(4, "", [pid 6707] exit_group(0 [pid 5070] close(3 [pid 6717] <... futex resumed>) = ? [pid 6711] <... futex resumed>) = ? [pid 6707] <... exit_group resumed>) = ? [pid 5070] <... close resumed>) = 0 [pid 6720] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6720] <... openat resumed>) = 4 [pid 6719] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6717] +++ exited with 0 +++ [pid 6711] +++ exited with 0 +++ [pid 6707] +++ exited with 0 +++ [pid 5070] rmdir("./90" [pid 5065] getdents64(4, [pid 6720] ioctl(4, LOOP_SET_FD, 3 [pid 6714] <... write resumed>) = 57344 [pid 5070] <... rmdir resumed>) = 0 [ 155.821482][ T6714] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.828821][ T6714] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.838587][ T6711] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.843946][ T6714] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.853820][ T6714] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.862051][ T6719] loop1: detected capacity change from 0 to 1024 [pid 6719] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6719] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6720] <... ioctl resumed>) = 0 [pid 6719] <... openat resumed>) = 3 [pid 6714] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6707, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] getdents64(4, [pid 6720] close(3 [pid 6714] <... futex resumed>) = 0 [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6720] <... close resumed>) = 0 [pid 6714] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... restart_syscall resumed>) = 0 [pid 5065] close(4 [pid 6720] mkdir("./bus", 0777 [pid 5065] <... close resumed>) = 0 [pid 6719] chdir("./bus" [pid 5070] mkdir("./91", 0777 [pid 6720] <... mkdir resumed>) = 0 [pid 6719] <... chdir resumed>) = 0 [pid 5070] <... mkdir resumed>) = 0 [pid 5065] rmdir("./90/bus" [pid 6720] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6719] ioctl(4, LOOP_CLR_FD [pid 6713] exit_group(0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6721] <... futex resumed>) = ? [pid 6719] <... ioctl resumed>) = 0 [pid 6713] <... exit_group resumed>) = ? [pid 5070] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 6721] +++ exited with 0 +++ [pid 6719] close(4 [pid 6714] <... futex resumed>) = ? [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6719] <... close resumed>) = 0 [pid 6714] +++ exited with 0 +++ [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5068] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6719] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6719] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 5070] close(3 [pid 6719] creat("./bus", 000 [pid 6718] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6719] <... creat resumed>) = 4 [pid 6718] <... futex resumed>) = 0 [pid 6713] +++ exited with 0 +++ [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6718] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] unlink("./90/binderfs" [pid 5068] getdents64(3, [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6713, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6719] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 6719] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6722 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6722 attached [pid 6719] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6722] set_robust_list(0x555555fbc6a0, 24 [pid 6720] <... mount resumed>) = 0 [pid 6719] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6718] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6722] <... set_robust_list resumed>) = 0 [pid 6718] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [ 155.907082][ T6720] loop2: detected capacity change from 0 to 1024 [pid 6722] chdir("./91" [pid 6719] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6722] <... chdir resumed>) = 0 [pid 6720] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5069] newfstatat(3, "", [pid 5065] <... close resumed>) = 0 [pid 6720] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] rmdir("./90" [pid 6720] chdir("./bus" [pid 5069] getdents64(3, [pid 6722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6722] setpgid(0, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6720] <... chdir resumed>) = 0 [pid 6722] <... setpgid resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6720] ioctl(4, LOOP_CLR_FD [pid 5065] mkdir("./91", 0777 [pid 6722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6720] <... ioctl resumed>) = 0 [pid 6722] <... openat resumed>) = 3 [pid 6720] close(4 [pid 6722] write(3, "1000", 4) = 4 [pid 6722] close(3) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6722] symlink("/dev/binderfs", "./binderfs" [pid 6720] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6722] <... symlink resumed>) = 0 [pid 6720] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6722] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6720] <... futex resumed>) = 1 [pid 6715] <... futex resumed>) = 0 [pid 5069] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 6722] <... futex resumed>) = 0 [pid 6720] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6722] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6722] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6722] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6722] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6722] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6723]}, 88) = 6723 [pid 6722] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6723 attached NULL, 8) = 0 [pid 6723] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6722] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] <... futex resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6723] <... rseq resumed>) = 0 [pid 6722] <... futex resumed>) = 0 [pid 6715] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6723] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6722] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] close(3 [pid 6720] creat("./bus", 000 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6723] <... set_robust_list resumed>) = 0 [pid 6723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6723] memfd_create("syzkaller", 0) = 3 [pid 6720] <... creat resumed>) = 4 ./strace-static-x86_64: Process 6724 attached [pid 6723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6720] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] set_robust_list(0x555555fbc6a0, 24 [pid 6723] <... mmap resumed>) = 0x7efd74b1c000 [pid 6720] <... futex resumed>) = 1 [pid 6715] <... futex resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6724 [pid 6724] <... set_robust_list resumed>) = 0 [pid 6720] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6715] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6720] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6715] <... futex resumed>) = 0 [pid 6724] chdir("./91" [pid 6720] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6715] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6718] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6718] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] <... chdir resumed>) = 0 [pid 6718] <... futex resumed>) = 0 [pid 6718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6718] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6724] <... prctl resumed>) = 0 [pid 6723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6718] <... mprotect resumed>) = 0 [pid 6718] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6718] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6725]}, 88) = 6725 ./strace-static-x86_64: Process 6725 attached [pid 6718] rt_sigprocmask(SIG_SETMASK, [], [pid 6725] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6718] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6725] <... rseq resumed>) = 0 [ 155.959519][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 155.967210][ T6719] hfsplus: request for non-existent node 16715520 in B*Tree [ 155.987846][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 155.995501][ T6719] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6718] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6725] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6723] <... write resumed>) = 524288 [pid 6718] <... futex resumed>) = 0 [pid 6725] <... set_robust_list resumed>) = 0 [pid 6724] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 6724] <... setpgid resumed>) = 0 [pid 6718] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6725] rt_sigprocmask(SIG_SETMASK, [], [pid 6724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6725] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6724] <... openat resumed>) = 3 [pid 5068] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6725] creat("./file1", 000 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6724] write(3, "1000", 4 [pid 5069] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./91/bus", [pid 6723] munmap(0x7efd74b1c000, 138412032 [pid 6724] <... write resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6724] close(3 [pid 6723] <... munmap resumed>) = 0 [pid 5068] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(AT_FDCWD, "./90/bus", [pid 6724] <... close resumed>) = 0 [pid 6723] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6723] ioctl(4, LOOP_SET_FD, 3 [pid 6724] symlink("/dev/binderfs", "./binderfs" [pid 6715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6715] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6715] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6715] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6715] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6715] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6726 attached => {parent_tid=[6726]}, 88) = 6726 [pid 6726] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6715] rt_sigprocmask(SIG_SETMASK, [], [pid 6726] <... rseq resumed>) = 0 [pid 6715] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6726] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6715] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6726] <... set_robust_list resumed>) = 0 [pid 6724] <... symlink resumed>) = 0 [pid 6715] <... futex resumed>) = 0 [pid 6726] rt_sigprocmask(SIG_SETMASK, [], [pid 6724] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6726] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 156.019732][ T6720] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.027928][ T6719] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.045716][ T6719] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.051075][ T6720] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.054782][ T6723] loop5: detected capacity change from 0 to 1024 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 6726] creat("./file1", 000 [pid 6725] <... creat resumed>) = 5 [pid 6724] <... futex resumed>) = 0 [pid 6725] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6724] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5069] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(4, "", [pid 6725] <... futex resumed>) = 1 [pid 6718] <... futex resumed>) = 0 [pid 6725] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6724] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5069] <... openat resumed>) = 4 [pid 6724] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] newfstatat(4, "", [pid 5068] getdents64(4, [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] getdents64(4, [pid 5068] getdents64(4, [pid 6724] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6724] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6724] <... mprotect resumed>) = 0 [pid 5069] getdents64(4, [pid 5068] close(4 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6723] <... ioctl resumed>) = 0 [pid 5069] close(4 [pid 5068] <... close resumed>) = 0 [pid 6723] close(3 [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./91/bus" [pid 6723] <... close resumed>) = 0 [pid 5069] rmdir("./90/bus" [pid 6723] mkdir("./bus", 0777) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5069] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6723] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./91/binderfs"./strace-static-x86_64: Process 6727 attached [pid 6727] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6727] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6727] rt_sigprocmask(SIG_SETMASK, [], [pid 6724] <... clone3 resumed> => {parent_tid=[6727]}, 88) = 6727 [pid 5068] getdents64(3, [pid 6727] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6727] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] unlink("./90/binderfs") = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6724] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(3 [pid 5068] close(3 [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... close resumed>) = 0 [pid 6724] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./91" [pid 6727] <... futex resumed>) = 0 [pid 6724] <... futex resumed>) = 1 [pid 6727] memfd_create("syzkaller", 0) = 3 [pid 6727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6724] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6727] <... mmap resumed>) = 0x7efd74b1c000 [pid 6727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6726] <... creat resumed>) = 5 [pid 6723] <... mount resumed>) = 0 [pid 6715] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] rmdir("./90" [pid 5068] <... rmdir resumed>) = 0 [pid 6726] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6723] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6726] <... futex resumed>) = 0 [pid 6723] <... openat resumed>) = 3 [pid 5069] <... rmdir resumed>) = 0 [pid 6726] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6723] chdir("./bus" [pid 5069] mkdir("./91", 0777 [pid 5068] mkdir("./92", 0777 [pid 6723] <... chdir resumed>) = 0 [pid 6723] ioctl(4, LOOP_CLR_FD) = 0 [pid 6723] close(4) = 0 [pid 6723] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6722] <... futex resumed>) = 0 [pid 6722] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6723] creat("./bus", 000 [pid 6722] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6723] <... creat resumed>) = 4 [ 156.067120][ T6720] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.084955][ T6719] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.098109][ T6720] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.101827][ T6719] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6723] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6719] <... write resumed>) = 57344 [pid 5068] <... mkdir resumed>) = 0 [pid 6723] <... futex resumed>) = 1 [pid 6722] <... futex resumed>) = 0 [pid 6719] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6723] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6722] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6727] <... write resumed>) = 524288 [pid 6722] <... futex resumed>) = 0 [pid 6719] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6722] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6719] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6718] exit_group(0 [pid 5069] <... openat resumed>) = 3 [pid 6725] <... futex resumed>) = ? [pid 6719] <... futex resumed>) = ? [pid 6718] <... exit_group resumed>) = ? [pid 6725] +++ exited with 0 +++ [pid 6719] +++ exited with 0 +++ [pid 6718] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6718, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6727] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6727] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] close(3 [pid 5068] close(3 [pid 5066] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6727] <... openat resumed>) = 4 [pid 5069] <... close resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6727] ioctl(4, LOOP_SET_FD, 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6729 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6728 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6729 attached [pid 6729] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6729] chdir("./91") = 0 [pid 6729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6727] <... ioctl resumed>) = 0 [pid 6729] setpgid(0, 0 [pid 6727] close(3) = 0 [pid 6727] mkdir("./bus", 0777) = 0 [pid 6729] <... setpgid resumed>) = 0 [pid 6729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6729] write(3, "1000", 4./strace-static-x86_64: Process 6728 attached [ 156.137823][ T6720] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.155114][ T6720] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.170526][ T6723] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.179796][ T6727] loop0: detected capacity change from 0 to 1024 ) = 4 [pid 6720] <... write resumed>) = 57344 [pid 6729] close(3 [pid 6720] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] set_robust_list(0x555555fbc6a0, 24 [pid 6729] <... close resumed>) = 0 [pid 6722] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6720] <... futex resumed>) = 0 [pid 6728] <... set_robust_list resumed>) = 0 [pid 6720] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] chdir("./92" [pid 6729] symlink("/dev/binderfs", "./binderfs" [pid 6727] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6722] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6715] exit_group(0 [pid 6728] <... chdir resumed>) = 0 [pid 6729] <... symlink resumed>) = 0 [pid 6726] <... futex resumed>) = ? [pid 6722] <... futex resumed>) = 0 [pid 6720] <... futex resumed>) = ? [pid 6715] <... exit_group resumed>) = ? [pid 6728] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6729] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6726] +++ exited with 0 +++ [pid 6722] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6720] +++ exited with 0 +++ [pid 6715] +++ exited with 0 +++ [pid 6728] <... prctl resumed>) = 0 [pid 6729] <... futex resumed>) = 0 [pid 6727] <... mount resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6715, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5066] <... umount2 resumed>) = 0 [pid 6729] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6727] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6722] <... mmap resumed>) = 0x7efd7cefb000 [pid 6728] setpgid(0, 0 [pid 6729] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6727] <... openat resumed>) = 3 [pid 6722] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6728] <... setpgid resumed>) = 0 [pid 6729] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6727] chdir("./bus" [pid 6722] <... mprotect resumed>) = 0 [pid 6729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] <... chdir resumed>) = 0 [pid 6722] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6727] ioctl(4, LOOP_CLR_FD [pid 6722] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6729] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6727] <... ioctl resumed>) = 0 [pid 6722] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6729] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6727] close(4./strace-static-x86_64: Process 6730 attached [pid 6728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6729] <... mprotect resumed>) = 0 [pid 6727] <... close resumed>) = 0 [pid 6722] <... clone3 resumed> => {parent_tid=[6730]}, 88) = 6730 [pid 6729] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6727] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6722] rt_sigprocmask(SIG_SETMASK, [], [pid 6729] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6727] <... futex resumed>) = 1 [pid 6722] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6730] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6728] <... openat resumed>) = 3 [ 156.202889][ T6723] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.211888][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 6729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6727] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6724] <... futex resumed>) = 0 [pid 6722] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6730] <... rseq resumed>) = 0 [pid 6728] write(3, "1000", 4 [pid 5067] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6730] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6728] <... write resumed>) = 4 [pid 6724] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6731 attached [pid 6730] <... set_robust_list resumed>) = 0 [pid 6728] close(3 [pid 6729] <... clone3 resumed> => {parent_tid=[6731]}, 88) = 6731 [pid 6727] <... futex resumed>) = 0 [pid 6724] <... futex resumed>) = 1 [pid 6722] <... futex resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6730] rt_sigprocmask(SIG_SETMASK, [], [pid 6728] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6730] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6728] symlink("/dev/binderfs", "./binderfs" [pid 6724] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6731] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6729] rt_sigprocmask(SIG_SETMASK, [], [pid 6727] creat("./bus", 000 [pid 6722] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 5066] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6731] <... rseq resumed>) = 0 [pid 6730] creat("./file1", 000 [pid 6728] <... symlink resumed>) = 0 [pid 6729] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6727] <... creat resumed>) = 4 [pid 5067] newfstatat(3, "", [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6731] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6729] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] newfstatat(AT_FDCWD, "./91/bus", [pid 6728] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... futex resumed>) = 0 [pid 6727] <... futex resumed>) = 1 [pid 6724] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6728] <... futex resumed>) = 0 [pid 6729] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6727] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6724] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6724] <... futex resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6728] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6728] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6731] <... set_robust_list resumed>) = 0 [pid 6728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6724] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6731] rt_sigprocmask(SIG_SETMASK, [], [pid 6728] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6731] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... openat resumed>) = 4 [pid 6731] memfd_create("syzkaller", 0 [pid 6728] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] newfstatat(4, "", [pid 6731] <... memfd_create resumed>) = 3 [pid 6728] <... mprotect resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] getdents64(4, [pid 6731] <... mmap resumed>) = 0x7efd74b1c000 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6728] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] getdents64(4, [pid 6728] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 6728] <... clone3 resumed> => {parent_tid=[6732]}, 88) = 6732 [pid 6728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6728] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... write resumed>) = 524288 [pid 6728] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6728] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6732 attached [pid 5066] rmdir("./91/bus" [pid 6732] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5066] <... rmdir resumed>) = 0 [pid 6732] <... rseq resumed>) = 0 [pid 5066] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6732] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6732] <... set_robust_list resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6732] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6732] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6722] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6732] memfd_create("syzkaller", 0 [pid 5066] unlink("./91/binderfs" [pid 6732] <... memfd_create resumed>) = 3 [pid 5066] <... unlink resumed>) = 0 [pid 6732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] getdents64(3, [pid 6732] <... mmap resumed>) = 0x7efd74b1c000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] close(3) = 0 [ 156.252317][ T6723] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.259669][ T6723] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.280888][ T6727] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.294424][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 5066] rmdir("./91" [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... rmdir resumed>) = 0 [pid 6732] <... write resumed>) = 524288 [pid 6724] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] mkdir("./92", 0777 [pid 6730] <... creat resumed>) = 5 [pid 6731] munmap(0x7efd74b1c000, 138412032 [pid 6724] <... futex resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 6730] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6730] <... futex resumed>) = 0 [pid 6724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6731] <... munmap resumed>) = 0 [pid 6730] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6724] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6724] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] newfstatat(AT_FDCWD, "./89/bus", [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6724] <... mprotect resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6731] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6724] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 6731] <... openat resumed>) = 4 [pid 6724] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 6731] ioctl(4, LOOP_SET_FD, 3 [pid 6724] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] <... openat resumed>) = 4 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6733 attached [pid 6724] <... clone3 resumed> => {parent_tid=[6733]}, 88) = 6733 [pid 5067] newfstatat(4, "", [pid 6733] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6724] rt_sigprocmask(SIG_SETMASK, [], [pid 6733] <... rseq resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6734 ./strace-static-x86_64: Process 6734 attached [pid 6733] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6724] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 156.330832][ T6727] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.350523][ T6723] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.366286][ T6731] loop4: detected capacity change from 0 to 1024 [pid 5067] getdents64(4, [pid 6734] set_robust_list(0x555555fbc6a0, 24 [pid 6733] <... set_robust_list resumed>) = 0 [pid 6732] munmap(0x7efd74b1c000, 138412032 [pid 6724] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6733] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] <... munmap resumed>) = 0 [pid 6724] <... futex resumed>) = 0 [pid 5067] close(4 [pid 6734] <... set_robust_list resumed>) = 0 [pid 6733] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6724] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... close resumed>) = 0 [pid 6734] chdir("./92" [pid 6733] creat("./file1", 000 [pid 5067] rmdir("./89/bus" [pid 6734] <... chdir resumed>) = 0 [pid 6734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6732] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 6732] <... openat resumed>) = 4 [pid 6734] <... prctl resumed>) = 0 [pid 6732] ioctl(4, LOOP_SET_FD, 3 [pid 5067] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6734] setpgid(0, 0 [pid 6732] <... ioctl resumed>) = 0 [pid 6734] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6731] <... ioctl resumed>) = 0 [pid 6731] close(3 [pid 6734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6731] <... close resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./89/binderfs", [pid 6731] mkdir("./bus", 0777) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] unlink("./89/binderfs" [pid 6731] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5067] <... unlink resumed>) = 0 [pid 6734] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 6734] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [ 156.379322][ T6727] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.392406][ T6723] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.402499][ T6732] loop3: detected capacity change from 0 to 1024 [pid 5067] close(3 [pid 6724] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6732] close(3 [pid 6734] <... write resumed>) = 4 [pid 6732] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 6734] close(3 [pid 6732] mkdir("./bus", 0777 [pid 6734] <... close resumed>) = 0 [pid 6732] <... mkdir resumed>) = 0 [pid 6734] symlink("/dev/binderfs", "./binderfs" [pid 6723] <... write resumed>) = 57344 [pid 6723] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6723] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6722] exit_group(0 [pid 5067] rmdir("./89" [pid 6734] <... symlink resumed>) = 0 [pid 6723] <... futex resumed>) = ? [pid 6722] <... exit_group resumed>) = ? [pid 6723] +++ exited with 0 +++ [pid 6732] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6730] <... futex resumed>) = ? [pid 5067] <... rmdir resumed>) = 0 [pid 6734] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] <... mount resumed>) = 0 [pid 6730] +++ exited with 0 +++ [pid 6722] +++ exited with 0 +++ [pid 5067] mkdir("./90", 0777 [pid 6734] <... futex resumed>) = 0 [pid 6731] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6722, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6734] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6731] <... openat resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 6734] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6731] chdir("./bus" [pid 6734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6733] <... creat resumed>) = 5 [pid 6732] <... mount resumed>) = 0 [pid 6731] <... chdir resumed>) = 0 [pid 5070] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6733] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6731] ioctl(4, LOOP_CLR_FD [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 156.431694][ T6727] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6733] <... futex resumed>) = 0 [pid 6732] <... openat resumed>) = 3 [pid 6731] <... ioctl resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 6734] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6733] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... openat resumed>) = 3 [pid 6732] chdir("./bus" [pid 6731] close(4 [pid 5070] newfstatat(3, "", [pid 6731] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6734] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6732] <... chdir resumed>) = 0 [pid 6731] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] getdents64(3, [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 6734] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6732] ioctl(4, LOOP_CLR_FD [pid 6731] <... futex resumed>) = 1 [pid 6729] <... futex resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] <... close resumed>) = 0 [pid 6734] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6732] <... ioctl resumed>) = 0 [pid 6731] creat("./bus", 000 [pid 6729] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6732] close(4 [pid 6731] <... creat resumed>) = 4 [pid 6729] <... futex resumed>) = 0 [pid 6732] <... close resumed>) = 0 ./strace-static-x86_64: Process 6735 attached [pid 6732] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6735] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6734] <... clone3 resumed> => {parent_tid=[6735]}, 88) = 6735 [pid 6735] <... rseq resumed>) = 0 [pid 6734] rt_sigprocmask(SIG_SETMASK, [], [pid 6732] <... futex resumed>) = 1 [pid 6731] <... futex resumed>) = 0 [pid 6728] <... futex resumed>) = 0 [pid 6729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6735] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6732] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6731] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6728] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6736 [pid 6735] <... set_robust_list resumed>) = 0 [pid 6734] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6732] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6731] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6729] <... futex resumed>) = 0 [pid 6735] rt_sigprocmask(SIG_SETMASK, [], [pid 6734] <... futex resumed>) = 0 [pid 6732] creat("./bus", 000 [pid 6731] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6728] <... futex resumed>) = 0 [pid 6729] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6736 attached [pid 6735] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6734] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6732] <... creat resumed>) = 4 [pid 6736] set_robust_list(0x555555fbc6a0, 24 [pid 6735] memfd_create("syzkaller", 0 [pid 6732] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6728] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6736] <... set_robust_list resumed>) = 0 [pid 6735] <... memfd_create resumed>) = 3 [pid 6728] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6732] <... futex resumed>) = 0 [pid 6736] chdir("./90" [pid 6728] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6732] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6728] <... futex resumed>) = 0 [pid 6736] <... chdir resumed>) = 0 [pid 6735] <... mmap resumed>) = 0x7efd74b1c000 [pid 6728] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 156.475553][ T6727] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.493808][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 156.512627][ T6727] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6736] setpgid(0, 0 [pid 6735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6736] <... setpgid resumed>) = 0 [pid 6736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6735] <... write resumed>) = 524288 [pid 6736] <... openat resumed>) = 3 [pid 6736] write(3, "1000", 4) = 4 [pid 6736] close(3) = 0 [pid 6736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6727] <... write resumed>) = 57344 [pid 6736] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6727] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6736] <... futex resumed>) = 0 [pid 6729] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6727] <... futex resumed>) = 0 [pid 6736] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6729] <... futex resumed>) = 0 [pid 6727] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6736] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6729] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6736] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6729] <... mmap resumed>) = 0x7efd7cefb000 [pid 6736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6729] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6724] exit_group(0 [pid 6733] <... futex resumed>) = ? [pid 6729] <... mprotect resumed>) = 0 [pid 6724] <... exit_group resumed>) = ? [pid 6733] +++ exited with 0 +++ [pid 6729] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6729] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6737]}, 88) = 6737 [pid 6729] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6737 attached NULL, 8) = 0 [pid 6737] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6729] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6737] <... rseq resumed>) = 0 [pid 6729] <... futex resumed>) = 0 [pid 6737] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6729] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6737] <... set_robust_list resumed>) = 0 [pid 6737] rt_sigprocmask(SIG_SETMASK, [], [pid 6736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6728] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6727] <... futex resumed>) = ? [pid 6728] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6737] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6736] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6735] munmap(0x7efd74b1c000, 138412032 [pid 6728] <... futex resumed>) = 0 [pid 6727] +++ exited with 0 +++ [pid 6724] +++ exited with 0 +++ [pid 6736] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6724, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6736] <... mprotect resumed>) = 0 [ 156.526906][ T6731] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.540493][ T6732] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.566203][ T6731] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6728] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6737] creat("./file1", 000 [pid 6736] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6728] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] <... umount2 resumed>) = 0 [pid 6736] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6728] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6728] <... mprotect resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] newfstatat(AT_FDCWD, "./91/bus", [pid 6736] <... clone3 resumed> => {parent_tid=[6738]}, 88) = 6738 [pid 6735] <... munmap resumed>) = 0 [pid 6728] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6736] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6738 attached [pid 6736] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6728] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6738] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6736] <... futex resumed>) = 0 [pid 6735] <... openat resumed>) = 4 [pid 6728] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 6738] <... rseq resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 6736] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] newfstatat(3, "", [pid 6738] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6735] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6738] <... set_robust_list resumed>) = 0 [pid 5070] getdents64(4, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 6739 attached [pid 6738] rt_sigprocmask(SIG_SETMASK, [], [pid 6728] <... clone3 resumed> => {parent_tid=[6739]}, 88) = 6739 [pid 6739] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6728] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] getdents64(3, [pid 6739] <... rseq resumed>) = 0 [pid 6728] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6728] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6739] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6728] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6738] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6739] <... set_robust_list resumed>) = 0 [pid 6738] memfd_create("syzkaller", 0 [pid 6728] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6739] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] <... memfd_create resumed>) = 3 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6739] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6739] creat("./file1", 000 [pid 6738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] getdents64(4, [pid 6738] <... mmap resumed>) = 0x7efd74b1c000 [pid 6729] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5070] close(4 [pid 6735] <... ioctl resumed>) = 0 [pid 5070] <... close resumed>) = 0 [ 156.576763][ T6732] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.597222][ T6735] loop1: detected capacity change from 0 to 1024 [ 156.598004][ T6732] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.616744][ T47] hfsplus: b-tree write err: -5, ino 4 [pid 6735] close(3 [pid 5070] rmdir("./91/bus") = 0 [pid 5070] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6738] <... write resumed>) = 524288 [pid 5070] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6735] <... close resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] unlink("./91/binderfs") = 0 [pid 6735] mkdir("./bus", 0777 [pid 5070] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./91") = 0 [pid 5070] mkdir("./92", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6735] <... mkdir resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6735] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6728] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6737] <... creat resumed>) = 5 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6740 [pid 6738] munmap(0x7efd74b1c000, 138412032 [pid 6737] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6740 attached [pid 6738] <... munmap resumed>) = 0 [pid 6737] <... futex resumed>) = 0 [pid 6740] set_robust_list(0x555555fbc6a0, 24 [pid 6737] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6740] <... set_robust_list resumed>) = 0 [pid 6740] chdir("./92") = 0 [pid 6738] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6738] <... openat resumed>) = 4 [pid 6740] <... prctl resumed>) = 0 [pid 6738] ioctl(4, LOOP_SET_FD, 3 [pid 6740] setpgid(0, 0 [pid 6735] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6735] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6740] <... setpgid resumed>) = 0 [pid 6735] <... openat resumed>) = 3 [ 156.630147][ T6731] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.663163][ T6732] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.671640][ T6731] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] newfstatat(AT_FDCWD, "./91/bus", [pid 6740] <... openat resumed>) = 3 [pid 6735] chdir("./bus" [pid 6740] write(3, "1000", 4 [pid 6735] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6740] <... write resumed>) = 4 [pid 6739] <... creat resumed>) = 5 [pid 6735] ioctl(4, LOOP_CLR_FD [pid 6740] close(3 [pid 5065] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6740] <... close resumed>) = 0 [pid 6739] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6740] symlink("/dev/binderfs", "./binderfs" [pid 6739] <... futex resumed>) = 0 [pid 6735] close(4 [pid 5065] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6740] <... symlink resumed>) = 0 [pid 6739] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6735] <... close resumed>) = 0 [pid 6740] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6735] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 4 [pid 6735] <... futex resumed>) = 1 [pid 6734] <... futex resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 6740] <... futex resumed>) = 0 [pid 6738] <... ioctl resumed>) = 0 [pid 6735] creat("./bus", 000 [pid 6734] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6734] <... futex resumed>) = 0 [pid 5065] getdents64(4, [pid 6740] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6738] close(3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6740] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6738] <... close resumed>) = 0 [pid 6735] <... creat resumed>) = 4 [pid 5065] getdents64(4, [pid 6740] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6738] mkdir("./bus", 0777 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 6740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6738] <... mkdir resumed>) = 0 [pid 6734] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [pid 6740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5065] rmdir("./91/bus" [pid 6740] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6738] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6740] <... mprotect resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6740] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6735] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6740] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6735] <... futex resumed>) = 1 [pid 6734] <... futex resumed>) = 0 [pid 6740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6735] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6734] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6741 attached [pid 6738] <... mount resumed>) = 0 [ 156.687207][ T6738] loop2: detected capacity change from 0 to 1024 [ 156.709595][ T6731] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.718358][ T6732] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] newfstatat(AT_FDCWD, "./91/binderfs", [pid 6741] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6740] <... clone3 resumed> => {parent_tid=[6741]}, 88) = 6741 [pid 6738] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6734] <... futex resumed>) = 0 [pid 6740] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] <... openat resumed>) = 3 [pid 6741] <... rseq resumed>) = 0 [pid 6740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6734] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6741] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6740] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6738] chdir("./bus" [pid 6741] <... set_robust_list resumed>) = 0 [pid 6740] <... futex resumed>) = 0 [pid 6741] rt_sigprocmask(SIG_SETMASK, [], [pid 6740] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6738] <... chdir resumed>) = 0 [pid 6741] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6738] ioctl(4, LOOP_CLR_FD [pid 6741] memfd_create("syzkaller", 0 [pid 6738] <... ioctl resumed>) = 0 [pid 6741] <... memfd_create resumed>) = 3 [pid 6738] close(4 [pid 6741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6738] <... close resumed>) = 0 [pid 6741] <... mmap resumed>) = 0x7efd74b1c000 [pid 6738] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6738] <... futex resumed>) = 1 [pid 6736] <... futex resumed>) = 0 [pid 5065] unlink("./91/binderfs" [pid 6738] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... unlink resumed>) = 0 [pid 6736] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6738] <... futex resumed>) = 0 [pid 6736] <... futex resumed>) = 1 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6738] creat("./bus", 000) = 4 [pid 6736] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] close(3 [pid 6738] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 6738] <... futex resumed>) = 1 [pid 6736] <... futex resumed>) = 0 [pid 6738] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6736] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rmdir("./91" [pid 6736] <... futex resumed>) = 0 [pid 6736] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... rmdir resumed>) = 0 [ 156.743417][ T6731] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.752214][ T6732] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.755331][ T6735] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6741] <... write resumed>) = 524288 [pid 5065] mkdir("./92", 0777) = 0 [pid 6741] munmap(0x7efd74b1c000, 138412032 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6732] <... write resumed>) = 57344 [pid 6731] <... write resumed>) = 57344 [pid 5065] close(3 [pid 6732] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6731] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6729] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6737] <... futex resumed>) = ? [pid 6732] <... futex resumed>) = 0 [pid 6731] <... futex resumed>) = ? [pid 6729] <... exit_group resumed>) = ? [pid 6737] +++ exited with 0 +++ [pid 6732] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6731] +++ exited with 0 +++ [pid 6728] exit_group(0 [pid 6729] +++ exited with 0 +++ [pid 6739] <... futex resumed>) = ? [pid 6732] <... futex resumed>) = ? [pid 6728] <... exit_group resumed>) = ? [pid 6739] +++ exited with 0 +++ [pid 6732] +++ exited with 0 +++ [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6742 ./strace-static-x86_64: Process 6742 attached [pid 6741] <... munmap resumed>) = 0 [pid 6742] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6742] chdir("./92" [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6729, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5069] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6742] <... chdir resumed>) = 0 [pid 6741] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6728] +++ exited with 0 +++ [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6728, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5069] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] restart_syscall(<... resuming interrupted clone ...> [pid 6742] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6741] <... openat resumed>) = 4 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... restart_syscall resumed>) = 0 [pid 6742] <... prctl resumed>) = 0 [pid 6741] ioctl(4, LOOP_SET_FD, 3 [pid 5069] newfstatat(3, "", [pid 6742] setpgid(0, 0 [pid 6734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6742] <... setpgid resumed>) = 0 [pid 6734] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 156.783694][ T6738] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.815596][ T6741] loop5: detected capacity change from 0 to 1024 [ 156.824536][ T6738] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6742] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6734] <... futex resumed>) = 0 [pid 6742] <... openat resumed>) = 3 [pid 6736] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] getdents64(3, [pid 6734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6736] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6734] <... mmap resumed>) = 0x7efd7cefb000 [pid 6736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6736] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6734] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6742] write(3, "1000", 4 [pid 6736] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6734] <... mprotect resumed>) = 0 [pid 6742] <... write resumed>) = 4 [pid 6736] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6734] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6742] close(3 [pid 6736] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6734] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6734] <... clone3 resumed> => {parent_tid=[6743]}, 88) = 6743 [pid 6742] <... close resumed>) = 0 [pid 6734] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6742] symlink("/dev/binderfs", "./binderfs" [pid 6736] <... clone3 resumed> => {parent_tid=[6744]}, 88) = 6744 [pid 6742] <... symlink resumed>) = 0 [pid 6736] rt_sigprocmask(SIG_SETMASK, [], [pid 6742] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6736] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6742] <... futex resumed>) = 0 [pid 6736] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6736] <... futex resumed>) = 0 [pid 6742] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6736] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6742] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6741] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6744 attached ./strace-static-x86_64: Process 6743 attached [pid 6742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6734] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6741] close(3 [pid 6742] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6741] <... close resumed>) = 0 [pid 6742] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6741] mkdir("./bus", 0777 [pid 5068] <... openat resumed>) = 3 [pid 6744] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6743] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6742] <... mprotect resumed>) = 0 [pid 6741] <... mkdir resumed>) = 0 [pid 6734] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... rseq resumed>) = 0 [pid 6743] <... rseq resumed>) = 0 [pid 6742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6734] <... futex resumed>) = 0 [pid 5068] newfstatat(3, "", [pid 6744] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6743] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6744] <... set_robust_list resumed>) = 0 [pid 6743] <... set_robust_list resumed>) = 0 [pid 6734] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6744] rt_sigprocmask(SIG_SETMASK, [], [pid 6743] rt_sigprocmask(SIG_SETMASK, [], [pid 6744] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] getdents64(3, [pid 6743] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6744] creat("./file1", 000 [pid 6743] creat("./file1", 000 [pid 6742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6741] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5068] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6745 attached [pid 6742] <... clone3 resumed> => {parent_tid=[6745]}, 88) = 6745 [pid 6745] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6742] rt_sigprocmask(SIG_SETMASK, [], [pid 6745] <... rseq resumed>) = 0 [pid 6742] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 156.838005][ T6735] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.853202][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 156.867439][ T6735] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.875249][ T6738] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6745] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6742] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] <... set_robust_list resumed>) = 0 [pid 6742] <... futex resumed>) = 0 [pid 6745] rt_sigprocmask(SIG_SETMASK, [], [pid 6742] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6745] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6745] memfd_create("syzkaller", 0) = 3 [pid 6745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6736] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... umount2 resumed>) = 0 [pid 6745] <... mmap resumed>) = 0x7efd74b1c000 [pid 6745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6745] <... write resumed>) = 524288 [pid 6741] <... mount resumed>) = 0 [pid 6734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... umount2 resumed>) = 0 [pid 5069] newfstatat(AT_FDCWD, "./91/bus", [pid 6741] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6741] <... openat resumed>) = 3 [pid 5069] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6741] chdir("./bus" [pid 5069] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6741] <... chdir resumed>) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5068] newfstatat(AT_FDCWD, "./92/bus", [pid 6741] ioctl(4, LOOP_CLR_FD [pid 5069] newfstatat(4, "", [pid 6741] <... ioctl resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6741] close(4 [pid 5069] getdents64(4, [pid 6741] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6741] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6744] <... creat resumed>) = 5 [pid 6741] <... futex resumed>) = 1 [pid 6740] <... futex resumed>) = 0 [pid 5069] getdents64(4, [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6744] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6741] creat("./bus", 000 [pid 6740] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6744] <... futex resumed>) = 0 [pid 6743] <... creat resumed>) = 5 [pid 6741] <... creat resumed>) = 4 [pid 6740] <... futex resumed>) = 0 [ 156.893261][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 156.918598][ T6738] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.926035][ T6735] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6745] munmap(0x7efd74b1c000, 138412032 [pid 6741] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(4 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6745] <... munmap resumed>) = 0 [pid 6744] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6743] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6741] <... futex resumed>) = 0 [pid 6740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... close resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6743] <... futex resumed>) = 0 [pid 6741] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] rmdir("./91/bus" [pid 6745] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6743] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6741] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6740] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 4 [pid 6745] <... openat resumed>) = 4 [pid 6741] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6740] <... futex resumed>) = 0 [pid 5068] newfstatat(4, "", [pid 6745] ioctl(4, LOOP_SET_FD, 3 [pid 6740] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5069] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] rmdir("./92/bus") = 0 [ 156.972994][ T6735] hfsplus: request for non-existent node 16715520 in B*Tree [ 156.982741][ T6738] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.004906][ T6735] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.004950][ T6745] loop0: detected capacity change from 0 to 1024 [pid 6735] <... write resumed>) = 57344 [pid 5069] newfstatat(AT_FDCWD, "./91/binderfs", [pid 5068] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6735] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6735] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5068] newfstatat(AT_FDCWD, "./92/binderfs", [pid 5069] unlink("./91/binderfs" [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6734] exit_group(0 [pid 5068] unlink("./92/binderfs" [pid 6743] <... futex resumed>) = ? [pid 6734] <... exit_group resumed>) = ? [pid 5069] <... unlink resumed>) = 0 [pid 6743] +++ exited with 0 +++ [pid 5068] <... unlink resumed>) = 0 [pid 5069] getdents64(3, [pid 6735] <... futex resumed>) = ? [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] getdents64(3, [pid 5069] close(3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6740] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6740] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6735] +++ exited with 0 +++ [pid 6734] +++ exited with 0 +++ [pid 5069] <... close resumed>) = 0 [pid 5068] close(3 [pid 6740] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6734, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6740] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6740] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6746]}, 88) = 6746 [pid 5066] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6740] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6746 attached [pid 6740] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] rmdir("./91" [pid 5068] <... close resumed>) = 0 [pid 6746] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6740] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6740] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6746] <... rseq resumed>) = 0 [pid 6740] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... rmdir resumed>) = 0 [pid 5068] rmdir("./92" [pid 5066] newfstatat(3, "", [pid 6746] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6746] <... set_robust_list resumed>) = 0 [pid 6738] <... write resumed>) = 57344 [ 157.027310][ T6741] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.036787][ T6738] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.059905][ T6741] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 6746] rt_sigprocmask(SIG_SETMASK, [], [pid 6738] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6746] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6738] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6746] creat("./file1", 000 [pid 5066] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6745] <... ioctl resumed>) = 0 [pid 6736] exit_group(0 [pid 6745] close(3 [pid 6744] <... futex resumed>) = ? [pid 6738] <... futex resumed>) = ? [pid 6736] <... exit_group resumed>) = ? [pid 6745] <... close resumed>) = 0 [pid 6744] +++ exited with 0 +++ [pid 6738] +++ exited with 0 +++ [pid 6736] +++ exited with 0 +++ [pid 5069] mkdir("./92", 0777 [pid 5068] mkdir("./93", 0777 [pid 6746] <... creat resumed>) = 5 [pid 6746] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6745] mkdir("./bus", 0777 [pid 5069] <... mkdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 6745] <... mkdir resumed>) = 0 [pid 6745] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6746] <... futex resumed>) = 1 [pid 6745] <... mount resumed>) = 0 [pid 6740] <... futex resumed>) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6736, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6746] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6745] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6745] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 6745] chdir("./bus" [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5068] <... openat resumed>) = 3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 6745] <... chdir resumed>) = 0 [pid 6745] ioctl(4, LOOP_CLR_FD [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = 0 [pid 6745] <... ioctl resumed>) = 0 [pid 6745] close(4) = 0 [pid 6745] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6742] <... futex resumed>) = 0 [pid 6742] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6742] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6745] creat("./bus", 000 [pid 5066] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6745] <... creat resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 157.083115][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 157.099317][ T6741] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6745] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6745] <... futex resumed>) = 1 [pid 6742] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6742] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6742] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6745] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5069] close(3 [pid 5066] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... close resumed>) = 0 [pid 5068] close(3 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5068] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5066] newfstatat(4, "", ./strace-static-x86_64: Process 6747 attached [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6747 [pid 5067] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6748 [pid 6747] set_robust_list(0x555555fbc6a0, 24 [pid 5067] <... openat resumed>) = 3 [pid 5067] newfstatat(3, "", [pid 6747] <... set_robust_list resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(4, [pid 6747] chdir("./92" [pid 5067] getdents64(3, [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6747] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] close(4 [pid 6747] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 6748 attached [pid 6747] <... prctl resumed>) = 0 [pid 5066] rmdir("./92/bus") = 0 [pid 6748] set_robust_list(0x555555fbc6a0, 24 [pid 5066] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6748] <... set_robust_list resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6748] chdir("./93" [pid 5066] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6748] <... chdir resumed>) = 0 [pid 5066] unlink("./92/binderfs" [ 157.123832][ T6741] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.138481][ T6745] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.160386][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6747] setpgid(0, 0 [pid 6748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... unlink resumed>) = 0 [pid 6748] <... prctl resumed>) = 0 [pid 6747] <... setpgid resumed>) = 0 [pid 6742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] getdents64(3, [pid 6748] setpgid(0, 0 [pid 6747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6742] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6748] <... setpgid resumed>) = 0 [pid 6742] <... futex resumed>) = 0 [pid 5066] close(3 [pid 6748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6742] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 6748] <... openat resumed>) = 3 [pid 6747] <... openat resumed>) = 3 [pid 6742] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] rmdir("./92" [pid 6742] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... rmdir resumed>) = 0 [pid 6747] write(3, "1000", 4 [pid 6748] write(3, "1000", 4 [pid 6747] <... write resumed>) = 4 [pid 6742] <... mprotect resumed>) = 0 [pid 5066] mkdir("./93", 0777 [pid 6748] <... write resumed>) = 4 [pid 6747] close(3 [pid 6742] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6748] close(3 [pid 6747] <... close resumed>) = 0 [pid 6742] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 6748] <... close resumed>) = 0 [pid 6747] symlink("/dev/binderfs", "./binderfs" [pid 6742] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6748] symlink("/dev/binderfs", "./binderfs" [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6748] <... symlink resumed>) = 0 [pid 6742] <... clone3 resumed> => {parent_tid=[6749]}, 88) = 6749 [pid 6748] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6742] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... openat resumed>) = 3 [pid 6748] <... futex resumed>) = 0 [pid 6742] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6748] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6742] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6748] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6742] <... futex resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6748] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6742] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] close(3 [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 6748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6748] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6748] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6750 attached ) = 0 [pid 6747] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6749 attached [pid 6749] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6750 [pid 6749] <... rseq resumed>) = 0 [pid 6749] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6747] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6749] <... set_robust_list resumed>) = 0 [pid 6750] set_robust_list(0x555555fbc6a0, 24 [pid 6749] rt_sigprocmask(SIG_SETMASK, [], [pid 6748] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6747] <... futex resumed>) = 0 [pid 6749] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6747] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6749] creat("./file1", 000 [pid 6747] <... rt_sigaction resumed>NULL, 8) = 0 [ 157.168342][ T6741] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.178542][ T6745] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.196956][ T6741] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6750] <... set_robust_list resumed>) = 0 [pid 6748] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6750] chdir("./93" [pid 6748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6751]}, 88) = 6751 [pid 6748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6750] <... chdir resumed>) = 0 [pid 6748] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6751 attached [pid 6750] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6748] <... futex resumed>) = 0 [pid 6751] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6750] <... prctl resumed>) = 0 [pid 6748] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6751] <... rseq resumed>) = 0 [pid 6750] setpgid(0, 0 [pid 6751] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6750] <... setpgid resumed>) = 0 [pid 6751] <... set_robust_list resumed>) = 0 [pid 6751] rt_sigprocmask(SIG_SETMASK, [], [pid 6750] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6751] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6751] memfd_create("syzkaller", 0) = 3 [pid 6750] <... openat resumed>) = 3 [pid 6747] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6741] <... write resumed>) = 57344 [pid 6751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6741] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6740] exit_group(0 [pid 6751] <... mmap resumed>) = 0x7efd74b1c000 [pid 6747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6746] <... futex resumed>) = ? [pid 6741] <... futex resumed>) = ? [pid 6740] <... exit_group resumed>) = ? [ 157.221875][ T6745] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5067] <... umount2 resumed>) = 0 [pid 6750] write(3, "1000", 4 [pid 6747] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6746] +++ exited with 0 +++ [pid 6741] +++ exited with 0 +++ [pid 6740] +++ exited with 0 +++ [pid 6747] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6740, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6750] <... write resumed>) = 4 [pid 6747] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6742] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6747] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6750] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6752 attached [pid 6752] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6750] <... close resumed>) = 0 [pid 6747] <... clone3 resumed> => {parent_tid=[6752]}, 88) = 6752 [pid 5070] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(AT_FDCWD, "./90/bus", [pid 6752] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6747] rt_sigprocmask(SIG_SETMASK, [], [pid 6752] <... set_robust_list resumed>) = 0 [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6752] rt_sigprocmask(SIG_SETMASK, [], [pid 6747] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6749] <... creat resumed>) = 5 [pid 6747] <... futex resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6752] memfd_create("syzkaller", 0 [pid 6750] symlink("/dev/binderfs", "./binderfs" [pid 6749] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6752] <... memfd_create resumed>) = 3 [pid 6750] <... symlink resumed>) = 0 [pid 6749] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6749] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6752] <... mmap resumed>) = 0x7efd74b1c000 [pid 6751] <... write resumed>) = 524288 [pid 6750] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] newfstatat(3, "", [pid 5067] <... openat resumed>) = 4 [pid 6750] <... futex resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6750] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 5070] getdents64(3, [pid 6750] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] newfstatat(4, "", [pid 6751] munmap(0x7efd74b1c000, 138412032 [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6751] <... munmap resumed>) = 0 [pid 6750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(4, [pid 6751] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6750] <... mmap resumed>) = 0x7efd7cf1c000 [ 157.248016][ T6745] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.279688][ T6745] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6751] <... openat resumed>) = 4 [pid 6750] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6751] ioctl(4, LOOP_SET_FD, 3 [pid 6750] <... mprotect resumed>) = 0 [pid 5067] getdents64(4, [pid 6750] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} => {parent_tid=[6753]}, 88) = 6753 [pid 6750] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6750] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] close(4 [pid 6750] <... futex resumed>) = 0 [pid 6750] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6753 attached [pid 5067] rmdir("./90/bus" [pid 6753] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053) = 0 [pid 6753] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6753] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6752] <... write resumed>) = 524288 [pid 5067] <... rmdir resumed>) = 0 [pid 6752] munmap(0x7efd74b1c000, 138412032 [pid 5067] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6753] memfd_create("syzkaller", 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6753] <... memfd_create resumed>) = 3 [pid 6753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6751] <... ioctl resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./90/binderfs", [pid 6753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6752] <... munmap resumed>) = 0 [pid 6751] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6752] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] unlink("./90/binderfs" [pid 6752] <... openat resumed>) = 4 [pid 6751] <... close resumed>) = 0 [pid 6745] <... write resumed>) = 57344 [pid 5067] <... unlink resumed>) = 0 [pid 6751] mkdir("./bus", 0777 [pid 6745] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6751] <... mkdir resumed>) = 0 [pid 6745] <... futex resumed>) = 0 [pid 5067] getdents64(3, [pid 6752] ioctl(4, LOOP_SET_FD, 3 [pid 6751] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6745] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 157.297253][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 157.308085][ T6751] loop3: detected capacity change from 0 to 1024 [ 157.320049][ T6745] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6742] exit_group(0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6753] <... write resumed>) = 524288 [pid 6751] <... mount resumed>) = 0 [pid 6749] <... futex resumed>) = ? [pid 6745] <... futex resumed>) = ? [pid 6742] <... exit_group resumed>) = ? [pid 5070] <... umount2 resumed>) = 0 [pid 6751] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6745] +++ exited with 0 +++ [pid 6753] munmap(0x7efd74b1c000, 138412032 [pid 6751] <... openat resumed>) = 3 [pid 6749] +++ exited with 0 +++ [pid 6742] +++ exited with 0 +++ [pid 5070] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(3 [pid 6751] chdir("./bus") = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... close resumed>) = 0 [pid 6751] ioctl(4, LOOP_CLR_FD [pid 5070] newfstatat(AT_FDCWD, "./92/bus", [pid 5067] rmdir("./90" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6742, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6753] <... munmap resumed>) = 0 [pid 6751] <... ioctl resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6751] close(4 [pid 5070] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./91", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6753] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6751] <... close resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6753] <... openat resumed>) = 4 [pid 6753] ioctl(4, LOOP_SET_FD, 3 [pid 6751] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 6751] <... futex resumed>) = 1 [pid 6748] <... futex resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 5067] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6752] <... ioctl resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6752] close(3) = 0 ./strace-static-x86_64: Process 6754 attached [pid 6753] <... ioctl resumed>) = 0 [pid 6752] mkdir("./bus", 0777 [pid 6751] creat("./bus", 000 [pid 6748] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6754] set_robust_list(0x555555fbc6a0, 24 [pid 6753] close(3 [pid 6751] <... creat resumed>) = 4 [pid 6748] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 6754] <... set_robust_list resumed>) = 0 [pid 6753] <... close resumed>) = 0 [pid 6752] <... mkdir resumed>) = 0 [pid 6751] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6754 [pid 6754] chdir("./91" [pid 6753] mkdir("./bus", 0777 [pid 6751] <... futex resumed>) = 0 [pid 6748] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] getdents64(4, [pid 6754] <... chdir resumed>) = 0 [pid 6753] <... mkdir resumed>) = 0 [pid 6752] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6751] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6748] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6754] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6751] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6748] <... futex resumed>) = 0 [pid 5070] close(4 [pid 6754] <... prctl resumed>) = 0 [pid 6751] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6748] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... close resumed>) = 0 [pid 6754] setpgid(0, 0 [pid 6753] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] rmdir("./92/bus" [pid 6754] <... setpgid resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 6754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6754] <... openat resumed>) = 3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6754] write(3, "1000", 4 [pid 5070] newfstatat(AT_FDCWD, "./92/binderfs", [pid 6754] <... write resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6754] close(3 [pid 5070] unlink("./92/binderfs" [pid 6754] <... close resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 6754] symlink("/dev/binderfs", "./binderfs" [pid 5070] getdents64(3, [pid 6754] <... symlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3 [pid 6753] <... mount resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6753] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] rmdir("./92" [pid 6754] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6753] <... openat resumed>) = 3 [pid 5070] <... rmdir resumed>) = 0 [pid 6753] chdir("./bus" [pid 6754] <... futex resumed>) = 0 [pid 6753] <... chdir resumed>) = 0 [pid 6754] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6753] ioctl(4, LOOP_CLR_FD [pid 6754] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6753] <... ioctl resumed>) = 0 [pid 6754] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 157.364896][ T6752] loop4: detected capacity change from 0 to 1024 [ 157.401642][ T6753] loop1: detected capacity change from 0 to 1024 [ 157.408670][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6753] close(4 [pid 6754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6753] <... close resumed>) = 0 [pid 5070] mkdir("./93", 0777 [pid 6753] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... mount resumed>) = 0 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6753] <... futex resumed>) = 1 [pid 6752] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6750] <... futex resumed>) = 0 [pid 6754] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6753] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6752] <... openat resumed>) = 3 [pid 6750] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6754] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6753] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6750] <... futex resumed>) = 0 [pid 6750] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6753] creat("./bus", 000) = 4 [pid 6754] <... mprotect resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6754] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6752] chdir("./bus" [pid 5070] <... openat resumed>) = 3 [pid 6753] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... chdir resumed>) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6753] <... futex resumed>) = 1 [pid 6752] ioctl(4, LOOP_CLR_FD [pid 6750] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6750] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] close(3 [pid 6754] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6753] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6752] <... ioctl resumed>) = 0 [pid 6750] <... futex resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6752] close(4 [pid 6750] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6752] <... close resumed>) = 0 [pid 6748] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6752] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] <... clone3 resumed> => {parent_tid=[6755]}, 88) = 6755 [pid 6748] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 157.437917][ T6751] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.450138][ T6751] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.475067][ T6753] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5065] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6754] rt_sigprocmask(SIG_SETMASK, [], [pid 6748] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6748] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] newfstatat(AT_FDCWD, "./92/bus", ./strace-static-x86_64: Process 6755 attached [pid 6754] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = 1 [pid 6748] <... mprotect resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6755] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5065] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6754] <... futex resumed>) = 0 [pid 6748] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6756 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6754] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6748] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6747] <... futex resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6748] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6747] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... openat resumed>) = 4 [pid 6747] <... futex resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 6747] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6748] <... clone3 resumed> => {parent_tid=[6757]}, 88) = 6757 [pid 5065] getdents64(4, [pid 6748] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6756 attached [pid 6748] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] getdents64(4, [pid 6756] set_robust_list(0x555555fbc6a0, 24 [pid 6748] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6748] <... futex resumed>) = 0 [pid 5065] close(4 [pid 6756] <... set_robust_list resumed>) = 0 [pid 6748] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... close resumed>) = 0 [pid 6755] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 6757 attached [pid 6755] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6752] creat("./bus", 000 [pid 6757] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6755] <... set_robust_list resumed>) = 0 [pid 6757] <... rseq resumed>) = 0 [pid 6756] chdir("./93" [pid 6755] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] rmdir("./92/bus" [pid 6757] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6755] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6757] <... set_robust_list resumed>) = 0 [pid 6752] <... creat resumed>) = 4 [pid 6757] rt_sigprocmask(SIG_SETMASK, [], [pid 6756] <... chdir resumed>) = 0 [pid 6755] memfd_create("syzkaller", 0 [pid 6752] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... rmdir resumed>) = 0 [pid 6757] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6756] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6755] <... memfd_create resumed>) = 3 [pid 6752] <... futex resumed>) = 1 [pid 6747] <... futex resumed>) = 0 [pid 6757] creat("./file1", 000 [pid 6756] <... prctl resumed>) = 0 [pid 6755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6752] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6747] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6757] <... creat resumed>) = 5 [pid 6756] setpgid(0, 0 [pid 6755] <... mmap resumed>) = 0x7efd74b1c000 [pid 6752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6747] <... futex resumed>) = 0 [pid 6757] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6756] <... setpgid resumed>) = 0 [pid 6752] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6748] <... futex resumed>) = 0 [pid 6747] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6756] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6757] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6756] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./92/binderfs", [pid 6755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./92/binderfs") = 0 [ 157.486101][ T6751] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.501705][ T6751] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.516738][ T6753] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6756] write(3, "1000", 4 [pid 6750] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] getdents64(3, [pid 6756] <... write resumed>) = 4 [pid 6750] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6756] close(3 [pid 6750] <... futex resumed>) = 0 [pid 5065] close(3 [pid 6756] <... close resumed>) = 0 [pid 6750] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 6756] symlink("/dev/binderfs", "./binderfs" [pid 6750] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] rmdir("./92" [pid 6756] <... symlink resumed>) = 0 [pid 6750] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... rmdir resumed>) = 0 [pid 6756] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6750] <... mprotect resumed>) = 0 [pid 5065] mkdir("./93", 0777 [pid 6756] <... futex resumed>) = 0 [pid 6756] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6755] <... write resumed>) = 524288 [pid 6756] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6756] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6750] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... mkdir resumed>) = 0 [pid 6756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6750] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6750] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... openat resumed>) = 3 [pid 6756] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6755] munmap(0x7efd74b1c000, 138412032 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6750] <... clone3 resumed> => {parent_tid=[6758]}, 88) = 6758 [pid 6750] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6758 attached [pid 6756] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6750] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6747] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] close(3 [pid 6758] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6756] <... mprotect resumed>) = 0 [pid 6750] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6758] <... rseq resumed>) = 0 [pid 6756] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6750] <... futex resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6758] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6750] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6747] <... futex resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6758] <... set_robust_list resumed>) = 0 [pid 6747] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6758] rt_sigprocmask(SIG_SETMASK, [], [pid 6756] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6747] <... mmap resumed>) = 0x7efd7cefb000 [pid 6758] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6758] creat("./file1", 000 [pid 6755] <... munmap resumed>) = 0 [pid 6751] <... write resumed>) = 57344 [pid 6747] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6759 [pid 6756] <... clone3 resumed> => {parent_tid=[6760]}, 88) = 6760 [pid 6747] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6760 attached ./strace-static-x86_64: Process 6759 attached [pid 6756] rt_sigprocmask(SIG_SETMASK, [], [pid 6747] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6760] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6759] set_robust_list(0x555555fbc6a0, 24 [pid 6756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6747] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6760] <... rseq resumed>) = 0 [pid 6759] <... set_robust_list resumed>) = 0 [pid 6756] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6747] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6761 attached [pid 6760] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6759] chdir("./93" [pid 6756] <... futex resumed>) = 0 [pid 6755] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6751] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6761] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6760] <... set_robust_list resumed>) = 0 [pid 6759] <... chdir resumed>) = 0 [pid 6756] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6747] <... clone3 resumed> => {parent_tid=[6761]}, 88) = 6761 [pid 6761] <... rseq resumed>) = 0 [pid 6760] rt_sigprocmask(SIG_SETMASK, [], [pid 6759] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6747] rt_sigprocmask(SIG_SETMASK, [], [pid 6761] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6760] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6759] <... prctl resumed>) = 0 [pid 6747] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6761] <... set_robust_list resumed>) = 0 [pid 6760] memfd_create("syzkaller", 0 [pid 6759] setpgid(0, 0 [pid 6747] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [ 157.541424][ T6753] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.545590][ T6752] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.556912][ T6751] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.560087][ T6753] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.581115][ T6751] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6761] rt_sigprocmask(SIG_SETMASK, [], [pid 6760] <... memfd_create resumed>) = 3 [pid 6759] <... setpgid resumed>) = 0 [pid 6747] <... futex resumed>) = 0 [pid 6761] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6755] <... openat resumed>) = 4 [pid 6751] <... futex resumed>) = 0 [pid 6747] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6761] creat("./file1", 000 [pid 6760] <... mmap resumed>) = 0x7efd74b1c000 [pid 6759] <... openat resumed>) = 3 [pid 6758] <... creat resumed>) = 5 [pid 6755] ioctl(4, LOOP_SET_FD, 3 [pid 6751] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6760] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6759] write(3, "1000", 4 [pid 6758] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6748] exit_group(0 [pid 6758] <... futex resumed>) = 1 [pid 6750] <... futex resumed>) = 0 [pid 6759] <... write resumed>) = 4 [pid 6758] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6759] close(3) = 0 [pid 6759] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6759] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6757] <... futex resumed>) = ? [pid 6751] <... futex resumed>) = ? [pid 6748] <... exit_group resumed>) = ? [pid 6759] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6757] +++ exited with 0 +++ [pid 6751] +++ exited with 0 +++ [pid 6759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6759] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6759] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6748] +++ exited with 0 +++ [pid 6759] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6748, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 6762 attached [pid 6759] <... clone3 resumed> => {parent_tid=[6762]}, 88) = 6762 [pid 6762] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6759] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6762] <... rseq resumed>) = 0 [pid 6759] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6762] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6759] <... futex resumed>) = 0 [pid 6762] <... set_robust_list resumed>) = 0 [pid 6759] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6762] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6760] <... write resumed>) = 524288 [ 157.596023][ T6752] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.615228][ T6753] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.615507][ T6755] loop2: detected capacity change from 0 to 1024 [pid 6762] memfd_create("syzkaller", 0) = 3 [pid 6760] munmap(0x7efd74b1c000, 138412032 [pid 6762] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6760] <... munmap resumed>) = 0 [pid 6762] <... mmap resumed>) = 0x7efd74b1c000 [pid 6747] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... openat resumed>) = 3 [pid 5068] newfstatat(3, "", [pid 6760] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6755] <... ioctl resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6760] ioctl(4, LOOP_SET_FD, 3 [pid 5068] getdents64(3, [pid 6762] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6755] close(3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6753] <... write resumed>) = 57344 [pid 5068] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6753] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6755] <... close resumed>) = 0 [pid 6753] <... futex resumed>) = 0 [pid 6753] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6755] mkdir("./bus", 0777 [pid 6762] <... write resumed>) = 524288 [pid 6755] <... mkdir resumed>) = 0 [pid 6750] exit_group(0 [pid 6758] <... futex resumed>) = ? [pid 6753] <... futex resumed>) = ? [pid 6750] <... exit_group resumed>) = ? [pid 6753] +++ exited with 0 +++ [pid 6760] <... ioctl resumed>) = 0 [ 157.642381][ T6753] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.643537][ T6752] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.662935][ T6760] loop5: detected capacity change from 0 to 1024 [ 157.685227][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6760] close(3 [pid 6758] +++ exited with 0 +++ [pid 6750] +++ exited with 0 +++ [pid 6760] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6750, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6760] mkdir("./bus", 0777) = 0 [pid 6755] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5066] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6762] munmap(0x7efd74b1c000, 138412032 [pid 6760] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6762] <... munmap resumed>) = 0 [pid 6762] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6762] ioctl(4, LOOP_SET_FD, 3 [pid 6760] <... mount resumed>) = 0 [pid 6761] <... creat resumed>) = 5 [pid 6760] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 6761] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6760] <... openat resumed>) = 3 [pid 6761] <... futex resumed>) = 0 [pid 6760] chdir("./bus" [pid 6761] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6760] <... chdir resumed>) = 0 [ 157.707468][ T6752] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.723548][ T47] hfsplus: b-tree write err: -5, ino 4 [ 157.738256][ T6762] loop0: detected capacity change from 0 to 1024 [pid 6760] ioctl(4, LOOP_CLR_FD) = 0 [pid 6755] <... mount resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5066] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6760] close(4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6755] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6760] <... close resumed>) = 0 [pid 6755] <... openat resumed>) = 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./93/bus", [pid 6762] <... ioctl resumed>) = 0 [pid 6760] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6760] <... futex resumed>) = 1 [pid 6756] <... futex resumed>) = 0 [pid 6755] chdir("./bus" [pid 5068] newfstatat(AT_FDCWD, "./93/bus", [pid 5066] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6756] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6756] <... futex resumed>) = 0 [pid 6755] <... chdir resumed>) = 0 [pid 5068] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6762] close(3 [pid 6760] creat("./bus", 000 [pid 6756] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] ioctl(4, LOOP_CLR_FD [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 4 [pid 6762] <... close resumed>) = 0 [pid 6760] <... creat resumed>) = 4 [pid 6755] <... ioctl resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] newfstatat(4, "", [pid 6762] mkdir("./bus", 0777 [pid 6755] close(4 [pid 5068] <... openat resumed>) = 4 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6762] <... mkdir resumed>) = 0 [pid 6760] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(4, [pid 6760] <... futex resumed>) = 1 [pid 6756] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6760] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6756] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(4, [pid 6760] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6756] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6762] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6760] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6756] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] <... close resumed>) = 0 [pid 5068] newfstatat(4, "", [pid 5066] close(4 [pid 6755] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... close resumed>) = 0 [pid 6755] <... futex resumed>) = 1 [pid 6754] <... futex resumed>) = 0 [pid 5068] getdents64(4, [pid 5066] rmdir("./93/bus" [pid 6755] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6754] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] <... rmdir resumed>) = 0 [pid 6755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6755] creat("./bus", 000 [pid 6754] <... futex resumed>) = 0 [pid 5066] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6755] <... creat resumed>) = 4 [pid 6754] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6755] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6754] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6755] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] unlink("./93/binderfs") = 0 [pid 6754] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 6755] <... futex resumed>) = 0 [pid 6754] <... futex resumed>) = 1 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6755] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6754] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] close(4 [pid 5066] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6762] <... mount resumed>) = 0 [pid 5066] close(3 [pid 6762] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 6762] <... openat resumed>) = 3 [pid 5066] rmdir("./93" [pid 6762] chdir("./bus" [pid 5066] <... rmdir resumed>) = 0 [pid 6762] <... chdir resumed>) = 0 [pid 6762] ioctl(4, LOOP_CLR_FD [pid 5066] mkdir("./94", 0777 [pid 6762] <... ioctl resumed>) = 0 [pid 6762] close(4 [pid 5066] <... mkdir resumed>) = 0 [pid 6762] <... close resumed>) = 0 [pid 6762] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6759] <... futex resumed>) = 0 [pid 6762] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6759] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6759] <... futex resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [ 157.763462][ T6752] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.793115][ T6752] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.802617][ T6760] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6762] creat("./bus", 000 [pid 6759] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6762] <... creat resumed>) = 4 [pid 6752] <... write resumed>) = 57344 [pid 6756] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6752] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6762] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6756] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6752] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5066] close(3) = 0 [pid 6747] exit_group(0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6747] <... exit_group resumed>) = ? [pid 6761] <... futex resumed>) = ? [pid 6761] +++ exited with 0 +++ [pid 6752] +++ exited with 0 +++ [pid 6747] +++ exited with 0 +++ [pid 6762] <... futex resumed>) = 1 [pid 6759] <... futex resumed>) = 0 [pid 6762] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6759] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6762] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6759] <... futex resumed>) = 0 [pid 6762] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6759] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6756] <... futex resumed>) = 0 [pid 5068] rmdir("./93/bus" [pid 6756] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6756] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6763 [pid 6756] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6756] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6764]}, 88) = 6764 ./strace-static-x86_64: Process 6763 attached [pid 6756] rt_sigprocmask(SIG_SETMASK, [], [pid 6763] set_robust_list(0x555555fbc6a0, 24 [pid 6756] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6756] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... set_robust_list resumed>) = 0 [pid 6756] <... futex resumed>) = 0 [pid 6763] chdir("./94" [ 157.824719][ T6755] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.833210][ T6760] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.851432][ T6755] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.859723][ T6755] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6756] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6764 attached [pid 6763] <... chdir resumed>) = 0 [pid 6754] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6747, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5068] <... rmdir resumed>) = 0 [pid 6764] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6754] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6764] <... rseq resumed>) = 0 [pid 6754] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6764] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6754] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6764] <... set_robust_list resumed>) = 0 [pid 6754] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] newfstatat(AT_FDCWD, "./93/binderfs", [pid 6763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6763] setpgid(0, 0) = 0 [pid 6764] rt_sigprocmask(SIG_SETMASK, [], [pid 6763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6754] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] unlink("./93/binderfs" [pid 6754] <... mprotect resumed>) = 0 [pid 6764] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 6764] creat("./file1", 000 [pid 5068] getdents64(3, [pid 6763] <... openat resumed>) = 3 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6763] write(3, "1000", 4) = 4 [pid 5068] close(3 [pid 6754] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6763] close(3 [pid 5068] <... close resumed>) = 0 [pid 6763] <... close resumed>) = 0 [pid 6754] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6763] symlink("/dev/binderfs", "./binderfs" [pid 6754] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6763] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6765 attached [pid 6763] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] rmdir("./93" [pid 6763] <... futex resumed>) = 0 [pid 6763] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6765] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6763] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6759] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6756] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6754] <... clone3 resumed> => {parent_tid=[6765]}, 88) = 6765 [pid 5069] <... openat resumed>) = 3 [pid 5068] <... rmdir resumed>) = 0 [pid 6765] <... rseq resumed>) = 0 [pid 6754] rt_sigprocmask(SIG_SETMASK, [], [pid 6765] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5069] newfstatat(3, "", [pid 5068] mkdir("./94", 0777 [pid 6754] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6754] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6765] <... set_robust_list resumed>) = 0 [pid 6759] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6765] rt_sigprocmask(SIG_SETMASK, [], [pid 6763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6759] <... mmap resumed>) = 0x7efd7cefb000 [pid 6754] <... futex resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6754] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(3, [pid 6763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6759] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6763] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6759] <... mprotect resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6763] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6759] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6765] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6763] <... mprotect resumed>) = 0 [pid 6759] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6763] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6759] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6763] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6759] <... clone3 resumed> => {parent_tid=[6766]}, 88) = 6766 ./strace-static-x86_64: Process 6767 attached ./strace-static-x86_64: Process 6766 attached [pid 6765] creat("./file1", 000 [pid 6759] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6767] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6766] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6763] <... clone3 resumed> => {parent_tid=[6767]}, 88) = 6767 [pid 6767] <... rseq resumed>) = 0 [pid 6766] <... rseq resumed>) = 0 [pid 6763] rt_sigprocmask(SIG_SETMASK, [], [pid 6759] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6767] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6766] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6763] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 157.868650][ T6760] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.879615][ T6762] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.899413][ T6760] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.901033][ T6755] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.908478][ T6762] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6759] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6767] <... set_robust_list resumed>) = 0 [pid 6766] <... set_robust_list resumed>) = 0 [pid 6763] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6764] <... creat resumed>) = 5 [pid 5068] close(3 [pid 6767] rt_sigprocmask(SIG_SETMASK, [], [pid 6766] rt_sigprocmask(SIG_SETMASK, [], [pid 6764] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] <... futex resumed>) = 0 [pid 6759] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 6767] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6766] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6764] <... futex resumed>) = 0 [pid 6763] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6759] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6767] memfd_create("syzkaller", 0 [pid 6766] creat("./file1", 000 [pid 6764] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6767] <... memfd_create resumed>) = 3 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6765] <... creat resumed>) = 5 [pid 6767] <... mmap resumed>) = 0x7efd74b1c000 [pid 6765] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 6768 attached [ 157.943102][ T58] hfsplus: b-tree write err: -5, ino 4 [ 157.949132][ T6760] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.950144][ T6755] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.972265][ T6762] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.979589][ T6762] hfsplus: request for non-existent node 16715520 in B*Tree ) = 524288 [pid 6765] <... futex resumed>) = 1 [pid 6754] <... futex resumed>) = 0 [pid 6768] set_robust_list(0x555555fbc6a0, 24 [pid 6765] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6759] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6768 [pid 6767] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6767] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6768] <... set_robust_list resumed>) = 0 [pid 6767] ioctl(4, LOOP_SET_FD, 3 [pid 6768] chdir("./94" [pid 5069] <... umount2 resumed>) = 0 [pid 6768] <... chdir resumed>) = 0 [pid 6768] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6755] <... write resumed>) = 57344 [pid 6755] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6755] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6768] <... prctl resumed>) = 0 [pid 5069] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6768] setpgid(0, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6754] exit_group(0 [pid 5069] newfstatat(AT_FDCWD, "./92/bus", [pid 6768] <... setpgid resumed>) = 0 [pid 6765] <... futex resumed>) = ? [pid 6755] <... futex resumed>) = ? [pid 6754] <... exit_group resumed>) = ? [pid 6768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6765] +++ exited with 0 +++ [pid 6755] +++ exited with 0 +++ [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6768] <... openat resumed>) = 3 [pid 6767] <... ioctl resumed>) = 0 [pid 6754] +++ exited with 0 +++ [pid 5069] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6768] write(3, "1000", 4 [pid 6767] close(3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6767] <... close resumed>) = 0 [pid 6766] <... creat resumed>) = 5 [pid 5069] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6754, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6768] <... write resumed>) = 4 [pid 6767] mkdir("./bus", 0777 [pid 6766] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... openat resumed>) = 4 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 6768] close(3 [pid 6767] <... mkdir resumed>) = 0 [pid 6766] <... futex resumed>) = 0 [pid 5069] newfstatat(4, "", [pid 5067] <... restart_syscall resumed>) = 0 [ 157.988496][ T6755] hfsplus: request for non-existent node 16715520 in B*Tree [ 157.991218][ T6760] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.011282][ T6767] loop1: detected capacity change from 0 to 1024 [pid 6766] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6768] <... close resumed>) = 0 [pid 6760] <... write resumed>) = 57344 [pid 6768] symlink("/dev/binderfs", "./binderfs" [pid 6760] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] getdents64(4, [pid 6768] <... symlink resumed>) = 0 [pid 6760] <... futex resumed>) = 0 [pid 6756] exit_group(0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6756] <... exit_group resumed>) = ? [pid 6768] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6764] <... futex resumed>) = ? [pid 6760] +++ exited with 0 +++ [pid 5069] getdents64(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6768] <... futex resumed>) = 0 [pid 6764] +++ exited with 0 +++ [pid 6756] +++ exited with 0 +++ [pid 6768] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6756, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5069] close(4 [pid 6768] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6767] <... mount resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6768] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6767] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] rmdir("./92/bus" [pid 5067] newfstatat(3, "", [pid 6768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6767] <... openat resumed>) = 3 [pid 6768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6767] chdir("./bus" [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6768] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6767] <... chdir resumed>) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 6768] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6767] ioctl(4, LOOP_CLR_FD [pid 6768] <... mprotect resumed>) = 0 [pid 6767] <... ioctl resumed>) = 0 [pid 5070] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6768] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6767] close(4 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 158.048167][ T6762] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.087099][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 5067] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6768] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6767] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6767] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... openat resumed>) = 3 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6767] <... futex resumed>) = 1 [pid 6763] <... futex resumed>) = 0 [pid 5070] newfstatat(3, "", [pid 5069] newfstatat(AT_FDCWD, "./92/binderfs", ./strace-static-x86_64: Process 6769 attached [pid 6768] <... clone3 resumed> => {parent_tid=[6769]}, 88) = 6769 [pid 6769] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6768] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6769] <... rseq resumed>) = 0 [pid 6768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6769] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6768] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] unlink("./92/binderfs" [pid 6769] <... set_robust_list resumed>) = 0 [pid 6768] <... futex resumed>) = 0 [pid 6769] rt_sigprocmask(SIG_SETMASK, [], [pid 6768] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6769] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6767] creat("./bus", 000 [pid 6763] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6769] memfd_create("syzkaller", 0 [pid 6767] <... creat resumed>) = 4 [pid 6763] <... futex resumed>) = 0 [pid 5070] getdents64(3, [pid 5069] <... unlink resumed>) = 0 [pid 6769] <... memfd_create resumed>) = 3 [pid 6767] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6763] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] getdents64(3, [pid 6769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6767] <... futex resumed>) = 0 [pid 6763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6769] <... mmap resumed>) = 0x7efd74b1c000 [pid 6763] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] close(3 [pid 6767] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6763] <... futex resumed>) = 0 [pid 6763] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] <... close resumed>) = 0 [pid 5069] rmdir("./92" [pid 6762] <... write resumed>) = 57344 [pid 6762] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6762] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6759] exit_group(0 [pid 6766] <... futex resumed>) = ? [pid 6762] <... futex resumed>) = ? [pid 6759] <... exit_group resumed>) = ? [pid 6766] +++ exited with 0 +++ [pid 6762] +++ exited with 0 +++ [pid 6759] +++ exited with 0 +++ [pid 5069] <... rmdir resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6759, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] mkdir("./93", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] newfstatat(AT_FDCWD, "./91/bus", [pid 5065] <... openat resumed>) = 3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(3, "", [pid 5067] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 158.101864][ T6762] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.116155][ T47] hfsplus: b-tree write err: -5, ino 4 [ 158.123847][ T6767] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5067] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] newfstatat(4, "", [pid 6763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6763] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] getdents64(4, [pid 6763] <... futex resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5067] getdents64(4, [pid 6763] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6763] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5067] close(4 [pid 6763] <... mprotect resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5067] rmdir("./91/bus") = 0 [pid 6769] <... write resumed>) = 524288 [pid 6763] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6763] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6763] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5067] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6763] <... clone3 resumed> => {parent_tid=[6770]}, 88) = 6770 [pid 5067] unlink("./91/binderfs" [pid 6763] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6770 attached [pid 6763] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 6770] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6763] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6770] <... rseq resumed>) = 0 [pid 6763] <... futex resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./93/bus", [pid 6770] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6763] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] close(3 [pid 5067] close(3 [pid 6770] <... set_robust_list resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 6770] rt_sigprocmask(SIG_SETMASK, [], [pid 6769] munmap(0x7efd74b1c000, 138412032 [pid 5070] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] rmdir("./91" [pid 6770] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6770] creat("./file1", 000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] mkdir("./92", 0777./strace-static-x86_64: Process 6771 attached [pid 6769] <... munmap resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6771 [pid 5067] <... mkdir resumed>) = 0 [pid 6771] set_robust_list(0x555555fbc6a0, 24 [pid 5070] <... openat resumed>) = 4 [pid 6771] <... set_robust_list resumed>) = 0 [pid 6771] chdir("./93") = 0 [pid 5070] newfstatat(4, "", [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6771] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] getdents64(4, [pid 6771] <... prctl resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6771] setpgid(0, 0 [pid 6769] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] getdents64(4, [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6771] <... setpgid resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 6771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6769] <... openat resumed>) = 4 [pid 5070] close(4 [pid 5067] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6770] <... creat resumed>) = 5 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6772 [pid 6770] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./93/bus" [pid 6771] <... openat resumed>) = 3 [pid 6770] <... futex resumed>) = 1 [pid 6763] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6772 attached [pid 6770] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6769] ioctl(4, LOOP_SET_FD, 3 [ 158.158393][ T6767] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.177680][ T47] hfsplus: b-tree write err: -5, ino 4 [ 158.190967][ T6767] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.200447][ T6767] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6771] write(3, "1000", 4 [pid 6772] set_robust_list(0x555555fbc6a0, 24 [pid 6771] <... write resumed>) = 4 [pid 6772] <... set_robust_list resumed>) = 0 [pid 6772] chdir("./92") = 0 [pid 6772] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6771] close(3 [pid 6772] <... prctl resumed>) = 0 [pid 6771] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6772] setpgid(0, 0 [pid 6771] symlink("/dev/binderfs", "./binderfs" [pid 6769] <... ioctl resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6772] <... setpgid resumed>) = 0 [pid 5070] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6771] <... symlink resumed>) = 0 [pid 6769] close(3 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6772] <... openat resumed>) = 3 [pid 6771] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] <... close resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./93/binderfs", [pid 5065] newfstatat(AT_FDCWD, "./93/bus", [pid 6771] <... futex resumed>) = 0 [pid 6769] mkdir("./bus", 0777 [pid 6772] write(3, "1000", 4 [pid 6771] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6769] <... mkdir resumed>) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6771] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6769] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] unlink("./93/binderfs" [pid 5065] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6771] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6772] <... write resumed>) = 4 [pid 6772] close(3 [pid 6771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6772] <... close resumed>) = 0 [pid 6771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... unlink resumed>) = 0 [pid 6772] symlink("/dev/binderfs", "./binderfs" [pid 6771] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] getdents64(3, [pid 5065] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6772] <... symlink resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6772] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] close(3 [pid 5065] <... openat resumed>) = 4 [pid 6772] <... futex resumed>) = 0 [pid 6771] <... mprotect resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 6772] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] rmdir("./93" [pid 5065] newfstatat(4, "", [pid 6772] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6771] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... rmdir resumed>) = 0 [pid 6769] <... mount resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6772] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5065] getdents64(4, [ 158.242366][ T6769] loop3: detected capacity change from 0 to 1024 [ 158.257018][ T6767] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6769] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] mkdir("./94", 0777 [pid 6772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6769] <... openat resumed>) = 3 [pid 6771] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6772] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] <... mkdir resumed>) = 0 [pid 6772] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6771] <... clone3 resumed> => {parent_tid=[6773]}, 88) = 6773 ./strace-static-x86_64: Process 6773 attached [pid 6769] chdir("./bus" [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6771] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] getdents64(4, [pid 6773] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6769] <... chdir resumed>) = 0 [pid 6769] ioctl(4, LOOP_CLR_FD [pid 6773] <... rseq resumed>) = 0 [pid 6772] <... mprotect resumed>) = 0 [pid 6771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6769] <... ioctl resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6773] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6772] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6771] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6769] close(4 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6773] <... set_robust_list resumed>) = 0 [pid 6772] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6771] <... futex resumed>) = 0 [pid 6769] <... close resumed>) = 0 [pid 5065] close(4 [pid 6773] rt_sigprocmask(SIG_SETMASK, [], [pid 6772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6771] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6769] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6774 attached [pid 6773] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... close resumed>) = 0 [pid 6774] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6772] <... clone3 resumed> => {parent_tid=[6774]}, 88) = 6774 [pid 6774] <... rseq resumed>) = 0 [pid 6772] rt_sigprocmask(SIG_SETMASK, [], [pid 6774] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6774] <... set_robust_list resumed>) = 0 [pid 6772] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] rt_sigprocmask(SIG_SETMASK, [], [pid 6772] <... futex resumed>) = 0 [pid 6774] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6772] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6774] memfd_create("syzkaller", 0) = 3 [pid 6774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6769] <... futex resumed>) = 1 [pid 6768] <... futex resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] rmdir("./93/bus" [pid 6773] memfd_create("syzkaller", 0 [pid 6769] creat("./bus", 000 [pid 6768] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] <... write resumed>) = 57344 [pid 5070] close(3 [pid 6774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6773] <... memfd_create resumed>) = 3 [pid 6769] <... creat resumed>) = 4 [pid 6768] <... futex resumed>) = 0 [pid 6767] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6769] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6767] <... futex resumed>) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6773] <... mmap resumed>) = 0x7efd74b1c000 [pid 6769] <... futex resumed>) = 0 [pid 6768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6767] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6763] exit_group(0 [pid 6770] <... futex resumed>) = ? [pid 6769] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6768] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6767] <... futex resumed>) = ? [pid 6763] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6770] +++ exited with 0 +++ [pid 6769] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6768] <... futex resumed>) = 0 [pid 6767] +++ exited with 0 +++ [pid 6763] +++ exited with 0 +++ [pid 5065] newfstatat(AT_FDCWD, "./93/binderfs", [pid 6769] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6768] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6763, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- ./strace-static-x86_64: Process 6775 attached [pid 6775] set_robust_list(0x555555fbc6a0, 24 [pid 5066] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6775] <... set_robust_list resumed>) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6775 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] unlink("./93/binderfs" [pid 6775] chdir("./94" [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6775] <... chdir resumed>) = 0 [ 158.283418][ T6767] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] getdents64(3, [pid 6775] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6774] <... write resumed>) = 524288 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6775] <... prctl resumed>) = 0 [pid 5066] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 6775] setpgid(0, 0) = 0 [pid 6775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6774] munmap(0x7efd74b1c000, 138412032 [pid 6775] <... openat resumed>) = 3 [pid 6774] <... munmap resumed>) = 0 [pid 6775] write(3, "1000", 4 [pid 6774] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6775] <... write resumed>) = 4 [pid 6774] <... openat resumed>) = 4 [pid 6775] close(3 [pid 6774] ioctl(4, LOOP_SET_FD, 3 [pid 6775] <... close resumed>) = 0 [pid 6773] <... write resumed>) = 524288 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6775] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6775] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6775] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6773] munmap(0x7efd74b1c000, 138412032 [pid 6775] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6773] <... munmap resumed>) = 0 [pid 6768] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] close(3 [pid 6775] <... mprotect resumed>) = 0 [pid 6773] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6775] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6773] <... openat resumed>) = 4 [pid 6768] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 6775] <... rt_sigprocmask resumed>[], 8) = 0 [ 158.349119][ T6769] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.376077][ T6774] loop2: detected capacity change from 0 to 1024 [ 158.377530][ T6769] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6773] ioctl(4, LOOP_SET_FD, 3 [pid 6768] <... futex resumed>) = 0 [pid 5065] rmdir("./93" [pid 6775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6775] <... clone3 resumed> => {parent_tid=[6776]}, 88) = 6776 [pid 6775] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6775] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... ioctl resumed>) = 0 [pid 6775] <... futex resumed>) = 0 [pid 6774] close(3 [pid 6775] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6774] <... close resumed>) = 0 [pid 6774] mkdir("./bus", 0777) = 0 [pid 6774] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6768] <... mmap resumed>) = 0x7efd7cefb000 [pid 6768] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] mkdir("./94", 0777 [pid 6768] <... mprotect resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6776 attached [pid 6768] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6776] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6768] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6768] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6776] <... rseq resumed>) = 0 [pid 6776] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6776] <... set_robust_list resumed>) = 0 [pid 5065] close(3 [pid 6776] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6777 attached [pid 6768] <... clone3 resumed> => {parent_tid=[6777]}, 88) = 6777 [pid 6777] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6776] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6768] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... close resumed>) = 0 [pid 6777] <... rseq resumed>) = 0 [pid 6776] memfd_create("syzkaller", 0 [pid 6774] <... mount resumed>) = 0 [pid 6773] <... ioctl resumed>) = 0 [pid 6768] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6777] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6774] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6773] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6777] <... set_robust_list resumed>) = 0 [pid 6776] <... memfd_create resumed>) = 3 [pid 6774] <... openat resumed>) = 3 [pid 6773] <... close resumed>) = 0 [pid 6768] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6777] rt_sigprocmask(SIG_SETMASK, [], [pid 6776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6774] chdir("./bus" [pid 6773] mkdir("./bus", 0777 [pid 6777] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6776] <... mmap resumed>) = 0x7efd74b1c000 [pid 6774] <... chdir resumed>) = 0 [pid 6773] <... mkdir resumed>) = 0 [pid 6768] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6778 attached [pid 6777] creat("./file1", 000 [pid 6774] ioctl(4, LOOP_CLR_FD [pid 6773] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6768] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6778 [pid 6778] set_robust_list(0x555555fbc6a0, 24 [pid 6776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6774] <... ioctl resumed>) = 0 [pid 6774] close(4 [pid 6778] <... set_robust_list resumed>) = 0 [pid 6774] <... close resumed>) = 0 [pid 6778] chdir("./94" [pid 6774] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6772] <... futex resumed>) = 0 [pid 6774] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6772] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6778] <... chdir resumed>) = 0 [pid 6772] <... futex resumed>) = 0 [pid 6778] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6772] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6778] <... prctl resumed>) = 0 [pid 6774] creat("./bus", 000 [pid 6778] setpgid(0, 0 [pid 6776] <... write resumed>) = 524288 [pid 6778] <... setpgid resumed>) = 0 [pid 6774] <... creat resumed>) = 4 [pid 6773] <... mount resumed>) = 0 [pid 6773] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6773] <... openat resumed>) = 3 [pid 6777] <... creat resumed>) = 5 [pid 6773] chdir("./bus") = 0 [pid 6774] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6773] ioctl(4, LOOP_CLR_FD [pid 6778] <... openat resumed>) = 3 [pid 6777] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... futex resumed>) = 1 [pid 6773] <... ioctl resumed>) = 0 [pid 6772] <... futex resumed>) = 0 [pid 6778] write(3, "1000", 4 [pid 6774] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6773] close(4 [pid 6772] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = 0 [pid 6778] <... write resumed>) = 4 [pid 6774] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6773] <... close resumed>) = 0 [pid 6772] <... futex resumed>) = 0 [pid 6774] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6773] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6778] close(3 [pid 6773] <... futex resumed>) = 1 [pid 6778] <... close resumed>) = 0 [pid 6773] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6778] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6778] <... symlink resumed>) = 0 [ 158.394819][ T6773] loop4: detected capacity change from 0 to 1024 [ 158.398878][ T6769] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.411723][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 158.424661][ T6769] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] newfstatat(AT_FDCWD, "./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6771] <... futex resumed>) = 0 [pid 6778] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6777] <... futex resumed>) = 1 [pid 6771] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] <... futex resumed>) = 0 [pid 5066] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6771] <... futex resumed>) = 1 [pid 6777] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6773] <... futex resumed>) = 0 [pid 6771] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] creat("./bus", 000) = 4 [pid 6773] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6773] <... futex resumed>) = 1 [pid 6771] <... futex resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6776] munmap(0x7efd74b1c000, 138412032 [pid 6773] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6771] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 6776] <... munmap resumed>) = 0 [pid 6771] <... futex resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 6776] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 158.478117][ T6769] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.490280][ T6774] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.508761][ T6769] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.512177][ T6773] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6771] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6778] <... futex resumed>) = 0 [pid 6776] <... openat resumed>) = 4 [pid 6778] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6776] ioctl(4, LOOP_SET_FD, 3 [pid 6778] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6778] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] getdents64(4, [pid 6778] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6778] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5066] getdents64(4, [pid 6778] <... mprotect resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6778] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] close(4) = 0 [pid 6772] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] rmdir("./94/bus" [pid 6772] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... rmdir resumed>) = 0 [pid 6776] <... ioctl resumed>) = 0 [pid 6776] close(3) = 0 [pid 6778] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6772] <... futex resumed>) = 0 [pid 5066] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6776] mkdir("./bus", 0777 [pid 6772] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6772] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] newfstatat(AT_FDCWD, "./94/binderfs", [pid 6778] <... clone3 resumed> => {parent_tid=[6779]}, 88) = 6779 [pid 6776] <... mkdir resumed>) = 0 [pid 6772] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6769] <... write resumed>) = 57344 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6778] rt_sigprocmask(SIG_SETMASK, [], [pid 6776] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6772] <... mprotect resumed>) = 0 [pid 6769] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6768] exit_group(0 [pid 5066] unlink("./94/binderfs" [pid 6778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6777] <... futex resumed>) = ? [pid 6772] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6769] <... futex resumed>) = ? [pid 6768] <... exit_group resumed>) = ? [pid 5066] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 6779 attached [pid 6778] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6777] +++ exited with 0 +++ [pid 6772] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6769] +++ exited with 0 +++ [pid 6779] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6778] <... futex resumed>) = 0 [pid 5066] getdents64(3, [pid 6779] <... rseq resumed>) = 0 [pid 6772] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6779] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6778] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6779] <... set_robust_list resumed>) = 0 [pid 6772] <... clone3 resumed> => {parent_tid=[6780]}, 88) = 6780 [pid 5066] close(3 [pid 6779] rt_sigprocmask(SIG_SETMASK, [], [pid 6772] rt_sigprocmask(SIG_SETMASK, [], [pid 6768] +++ exited with 0 +++ [pid 6779] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6772] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6771] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6768, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5066] <... close resumed>) = 0 ./strace-static-x86_64: Process 6780 attached [pid 6779] memfd_create("syzkaller", 0 [pid 6776] <... mount resumed>) = 0 [pid 6772] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] rmdir("./94" [pid 6780] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6776] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6780] <... rseq resumed>) = 0 [pid 6779] <... memfd_create resumed>) = 3 [pid 6776] <... openat resumed>) = 3 [pid 6772] <... futex resumed>) = 0 [pid 6771] <... futex resumed>) = 0 [pid 5068] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... rmdir resumed>) = 0 [pid 6780] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6776] chdir("./bus" [pid 6772] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6780] <... set_robust_list resumed>) = 0 [pid 6779] <... mmap resumed>) = 0x7efd74b1c000 [pid 6776] <... chdir resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 158.525193][ T6776] loop5: detected capacity change from 0 to 1024 [ 158.526021][ T6774] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.560391][ T6773] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] mkdir("./95", 0777 [pid 6780] rt_sigprocmask(SIG_SETMASK, [], [pid 6779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6776] ioctl(4, LOOP_CLR_FD [pid 6771] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] <... openat resumed>) = 3 [pid 5066] <... mkdir resumed>) = 0 [pid 6780] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6776] <... ioctl resumed>) = 0 [pid 6771] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] newfstatat(3, "", [pid 6780] creat("./file1", 000 [pid 6776] close(4 [pid 6771] <... mprotect resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6780] <... creat resumed>) = 5 [pid 6776] <... close resumed>) = 0 [pid 6771] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 6780] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6776] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6780] <... futex resumed>) = 1 [pid 6776] <... futex resumed>) = 1 [pid 6775] <... futex resumed>) = 0 [pid 6772] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6775] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6776] creat("./bus", 000 [pid 5068] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6775] <... futex resumed>) = 0 [pid 6771] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] close(3 [pid 6776] <... creat resumed>) = 4 ./strace-static-x86_64: Process 6781 attached [pid 6780] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6776] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... close resumed>) = 0 [pid 6779] <... write resumed>) = 524288 [pid 6775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6771] <... clone3 resumed> => {parent_tid=[6781]}, 88) = 6781 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6775] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6771] rt_sigprocmask(SIG_SETMASK, [], [pid 6776] <... futex resumed>) = 0 [pid 6781] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6776] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6781] <... rseq resumed>) = 0 [pid 6775] <... futex resumed>) = 0 [pid 6771] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6781] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6775] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6771] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6782 [pid 6781] <... set_robust_list resumed>) = 0 [pid 6779] munmap(0x7efd74b1c000, 138412032 [pid 6771] <... futex resumed>) = 0 [pid 6781] rt_sigprocmask(SIG_SETMASK, [], [pid 6779] <... munmap resumed>) = 0 [pid 6771] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6781] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6781] creat("./file1", 000./strace-static-x86_64: Process 6782 attached [pid 6779] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6782] set_robust_list(0x555555fbc6a0, 24 [pid 6779] <... openat resumed>) = 4 [pid 6782] <... set_robust_list resumed>) = 0 [ 158.583164][ T6774] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.590494][ T6774] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.605466][ T6773] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.614010][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6779] ioctl(4, LOOP_SET_FD, 3 [pid 6782] chdir("./95") = 0 [pid 6782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6782] setpgid(0, 0) = 0 [pid 6782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6782] write(3, "1000", 4) = 4 [pid 6782] close(3) = 0 [pid 6782] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6779] <... ioctl resumed>) = 0 [pid 6779] close(3 [pid 6782] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6781] <... creat resumed>) = 5 [pid 6782] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6781] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6781] <... futex resumed>) = 1 [pid 6771] <... futex resumed>) = 0 [pid 6782] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6781] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6775] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... umount2 resumed>) = 0 [pid 6782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6779] <... close resumed>) = 0 [pid 6775] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6779] mkdir("./bus", 0777 [pid 6775] <... futex resumed>) = 0 [pid 5068] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6782] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6779] <... mkdir resumed>) = 0 [pid 6775] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 158.629327][ T6779] loop0: detected capacity change from 0 to 1024 [ 158.635509][ T6776] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.637289][ T6773] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.666462][ T6773] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6782] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6779] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6775] <... mmap resumed>) = 0x7efd7cefb000 [pid 5068] newfstatat(AT_FDCWD, "./94/bus", [pid 6782] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6775] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6782] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6775] <... mprotect resumed>) = 0 [pid 6782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6779] <... mount resumed>) = 0 [pid 6775] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6779] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6775] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5068] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6779] chdir("./bus") = 0 [pid 6775] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6782] <... clone3 resumed> => {parent_tid=[6783]}, 88) = 6783 [pid 6779] ioctl(4, LOOP_CLR_FD) = 0 [pid 6782] rt_sigprocmask(SIG_SETMASK, [], [pid 6775] <... clone3 resumed> => {parent_tid=[6784]}, 88) = 6784 ./strace-static-x86_64: Process 6784 attached ./strace-static-x86_64: Process 6783 attached [pid 6782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6779] close(4 [pid 6775] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] <... openat resumed>) = 4 [pid 6783] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6782] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6775] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6783] <... rseq resumed>) = 0 [pid 6782] <... futex resumed>) = 0 [pid 6775] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6782] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6775] <... futex resumed>) = 0 [pid 5068] newfstatat(4, "", [pid 6783] <... set_robust_list resumed>) = 0 [ 158.692519][ T6774] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.699859][ T6774] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.712699][ T6776] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.721992][ T6773] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6775] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6784] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6783] rt_sigprocmask(SIG_SETMASK, [], [pid 6779] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6784] <... rseq resumed>) = 0 [pid 6784] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6779] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 6779] <... futex resumed>) = 1 [pid 6784] <... set_robust_list resumed>) = 0 [pid 6783] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6779] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6778] <... futex resumed>) = 0 [pid 6774] <... write resumed>) = 57344 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6784] rt_sigprocmask(SIG_SETMASK, [], [pid 6783] memfd_create("syzkaller", 0 [pid 6778] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6773] <... write resumed>) = 57344 [pid 6784] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6783] <... memfd_create resumed>) = 3 [pid 6779] <... futex resumed>) = 0 [pid 6778] <... futex resumed>) = 1 [pid 6783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6779] creat("./bus", 000 [pid 6778] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6784] creat("./file1", 000 [pid 6783] <... mmap resumed>) = 0x7efd74b1c000 [pid 6779] <... creat resumed>) = 4 [pid 6783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6779] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6772] exit_group(0 [pid 6773] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] getdents64(4, [pid 6780] <... futex resumed>) = ? [pid 6779] <... futex resumed>) = 1 [pid 6778] <... futex resumed>) = 0 [pid 6773] <... futex resumed>) = 0 [pid 6772] <... exit_group resumed>) = ? [pid 6780] +++ exited with 0 +++ [pid 6779] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6778] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6774] <... futex resumed>) = ? [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6778] <... futex resumed>) = 0 [pid 6773] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6771] exit_group(0 [pid 6779] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6778] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6773] <... futex resumed>) = ? [pid 6771] <... exit_group resumed>) = ? [pid 6783] <... write resumed>) = 524288 [pid 6781] <... futex resumed>) = ? [pid 6774] +++ exited with 0 +++ [pid 6773] +++ exited with 0 +++ [pid 6772] +++ exited with 0 +++ [ 158.746216][ T6776] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.780247][ T6776] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] close(4) = 0 [pid 6784] <... creat resumed>) = 5 [pid 6781] +++ exited with 0 +++ [pid 6775] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6771] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6772, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 6784] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rmdir("./94/bus" [pid 5067] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6784] <... futex resumed>) = 0 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6771, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5068] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6783] munmap(0x7efd74b1c000, 138412032) = 0 [pid 5069] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5069] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6784] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... openat resumed>) = 3 [pid 5068] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] newfstatat(3, "", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(3, "", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] newfstatat(AT_FDCWD, "./94/binderfs", [pid 6776] <... write resumed>) = 57344 [pid 5067] getdents64(3, [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6776] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6783] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6775] exit_group(0 [pid 5069] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6783] <... openat resumed>) = 4 [pid 6775] <... exit_group resumed>) = ? [pid 6783] ioctl(4, LOOP_SET_FD, 3 [pid 6778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6784] <... futex resumed>) = ? [pid 6778] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6776] <... futex resumed>) = ? [pid 5068] unlink("./94/binderfs" [pid 5067] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6778] <... futex resumed>) = 0 [pid 6778] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6778] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6778] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6778] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6783] <... ioctl resumed>) = 0 [pid 6783] close(3 [pid 6778] <... clone3 resumed> => {parent_tid=[6785]}, 88) = 6785 [pid 6783] <... close resumed>) = 0 [pid 6778] rt_sigprocmask(SIG_SETMASK, [], [pid 6783] mkdir("./bus", 0777 [pid 6778] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6783] <... mkdir resumed>) = 0 [pid 6778] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... unlink resumed>) = 0 [pid 6778] <... futex resumed>) = 0 [pid 6778] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6785 attached [pid 6783] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6785] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5068] getdents64(3, [pid 6785] <... rseq resumed>) = 0 [pid 6785] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6785] <... set_robust_list resumed>) = 0 [pid 6776] +++ exited with 0 +++ [ 158.794299][ T6779] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.796960][ T6776] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.815031][ T6776] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.825770][ T6779] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.830917][ T6783] loop1: detected capacity change from 0 to 1024 [pid 6785] rt_sigprocmask(SIG_SETMASK, [], [pid 5068] close(3 [pid 6785] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6784] +++ exited with 0 +++ [pid 6775] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6775, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5070] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6785] creat("./file1", 000 [pid 5070] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] rmdir("./94" [pid 6783] <... mount resumed>) = 0 [pid 6783] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6783] chdir("./bus") = 0 [pid 6783] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6783] close(4) = 0 [pid 6783] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] mkdir("./95", 0777 [pid 6783] <... futex resumed>) = 1 [pid 6782] <... futex resumed>) = 0 [pid 6783] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mkdir resumed>) = 0 [pid 6783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6783] creat("./bus", 000 [pid 6782] <... futex resumed>) = 0 [pid 6783] <... creat resumed>) = 4 [pid 6782] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6783] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6783] <... futex resumed>) = 1 [pid 6782] <... futex resumed>) = 0 [pid 6782] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... openat resumed>) = 3 [pid 6782] <... futex resumed>) = 0 [pid 6782] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 158.835743][ T6779] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.861481][ T58] hfsplus: b-tree write err: -5, ino 4 [ 158.868984][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 158.881940][ T57] hfsplus: b-tree write err: -5, ino 4 [pid 6783] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6778] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = 0 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] newfstatat(AT_FDCWD, "./92/bus", [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6786 ./strace-static-x86_64: Process 6786 attached [pid 6786] set_robust_list(0x555555fbc6a0, 24) = 0 [pid 6782] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6785] <... creat resumed>) = 5 [pid 6782] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6786] chdir("./95" [pid 6785] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6782] <... futex resumed>) = 0 [pid 5069] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 158.902556][ T6783] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.910145][ T6783] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.911944][ T6779] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6785] <... futex resumed>) = 0 [pid 6782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6782] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] newfstatat(AT_FDCWD, "./93/bus", [pid 6785] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6782] <... mprotect resumed>) = 0 [pid 5069] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6782] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6782] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6786] <... chdir resumed>) = 0 [pid 6782] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5069] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6786] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] newfstatat(4, "", ./strace-static-x86_64: Process 6787 attached [pid 6786] <... prctl resumed>) = 0 [pid 6782] <... clone3 resumed> => {parent_tid=[6787]}, 88) = 6787 [pid 5070] <... umount2 resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] <... openat resumed>) = 4 [pid 6782] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] newfstatat(4, "", [pid 6786] setpgid(0, 0) = 0 [pid 6782] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] getdents64(4, [pid 6782] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6787] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6782] <... futex resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6787] <... rseq resumed>) = 0 [pid 6787] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6782] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] getdents64(4, [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6787] rt_sigprocmask(SIG_SETMASK, [], [pid 6786] <... openat resumed>) = 3 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6787] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] close(4 [pid 5067] getdents64(4, [pid 6786] write(3, "1000", 4 [pid 6787] creat("./file1", 000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... close resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./94/bus", [pid 5069] rmdir("./93/bus" [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6786] <... write resumed>) = 4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... rmdir resumed>) = 0 [pid 6786] close(3 [pid 5069] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./93/binderfs") = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] close(3) = 0 [pid 5069] rmdir("./93" [pid 5070] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] mkdir("./94", 0777 [pid 5070] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... mkdir resumed>) = 0 [pid 5070] <... openat resumed>) = 4 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6786] <... close resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 5069] <... openat resumed>) = 3 [pid 5067] getdents64(4, [pid 6786] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] getdents64(4, [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(4 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5069] close(3 [pid 6786] <... symlink resumed>) = 0 [pid 5070] getdents64(4, [pid 5069] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] rmdir("./92/bus" [pid 5070] close(4) = 0 [pid 5070] rmdir("./94/bus" [pid 5067] <... rmdir resumed>) = 0 [pid 6786] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6779] <... write resumed>) = 57344 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6779] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6788 [pid 6779] <... futex resumed>) = 0 [pid 5070] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6786] <... futex resumed>) = 0 [pid 6779] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6788 attached [pid 6786] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6778] exit_group(0 [pid 5070] newfstatat(AT_FDCWD, "./94/binderfs", [pid 5067] newfstatat(AT_FDCWD, "./92/binderfs", [pid 6788] set_robust_list(0x555555fbc6a0, 24 [pid 6786] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6785] <... futex resumed>) = ? [pid 6779] <... futex resumed>) = ? [pid 6778] <... exit_group resumed>) = ? [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6788] <... set_robust_list resumed>) = 0 [pid 6786] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 158.948506][ T6779] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.974684][ T6783] hfsplus: request for non-existent node 16715520 in B*Tree [ 158.981074][ T6779] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6779] +++ exited with 0 +++ [pid 6785] +++ exited with 0 +++ [pid 5067] unlink("./92/binderfs" [pid 6788] chdir("./94" [pid 6786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6778] +++ exited with 0 +++ [pid 5070] unlink("./94/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 6786] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6778, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6786] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] getdents64(3, [pid 6788] <... chdir resumed>) = 0 [pid 6786] <... mprotect resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6782] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] getdents64(3, [pid 5067] close(3 [pid 5065] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6786] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5067] rmdir("./92" [pid 5065] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6788] <... prctl resumed>) = 0 [pid 6786] <... clone3 resumed> => {parent_tid=[6789]}, 88) = 6789 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6789 attached [pid 6788] setpgid(0, 0 [pid 6786] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 6789] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6788] <... setpgid resumed>) = 0 [pid 6786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... close resumed>) = 0 [pid 6789] <... rseq resumed>) = 0 [pid 6788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6786] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] rmdir("./94" [pid 5067] mkdir("./93", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6789] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6788] <... openat resumed>) = 3 [pid 6786] <... futex resumed>) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 6789] <... set_robust_list resumed>) = 0 [pid 6788] write(3, "1000", 4 [pid 6786] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5067] <... mkdir resumed>) = 0 [pid 6789] rt_sigprocmask(SIG_SETMASK, [], [pid 6788] <... write resumed>) = 4 [pid 5070] mkdir("./95", 0777 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6789] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6788] close(3 [pid 6787] <... creat resumed>) = 5 [pid 5065] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6789] memfd_create("syzkaller", 0 [pid 6788] <... close resumed>) = 0 [pid 6787] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... mkdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6789] <... memfd_create resumed>) = 3 [pid 6788] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6787] <... futex resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6787] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6789] <... mmap resumed>) = 0x7efd74b1c000 [pid 6788] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] close(3 [pid 6788] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5070] <... openat resumed>) = 3 [pid 6788] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 6788] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] close(3 [pid 6788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... close resumed>) = 0 [pid 6789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6788] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6788] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6791 [pid 6788] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 6790 attached [], 8) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6790 [pid 6790] set_robust_list(0x555555fbc6a0, 24 [pid 6788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6791 attached [pid 6790] <... set_robust_list resumed>) = 0 [pid 6789] <... write resumed>) = 524288 [pid 5065] <... umount2 resumed>) = 0 [pid 6791] set_robust_list(0x555555fbc6a0, 24 [pid 6790] chdir("./93" [pid 6788] <... clone3 resumed> => {parent_tid=[6792]}, 88) = 6792 ./strace-static-x86_64: Process 6792 attached [pid 6791] <... set_robust_list resumed>) = 0 [pid 6790] <... chdir resumed>) = 0 [pid 6788] rt_sigprocmask(SIG_SETMASK, [], [pid 6792] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6791] chdir("./95" [pid 6790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6792] <... rseq resumed>) = 0 [pid 6791] <... chdir resumed>) = 0 [pid 6790] <... prctl resumed>) = 0 [pid 6789] munmap(0x7efd74b1c000, 138412032 [pid 6788] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6790] setpgid(0, 0 [pid 6788] <... futex resumed>) = 0 [pid 6791] <... prctl resumed>) = 0 [pid 6790] <... setpgid resumed>) = 0 [pid 6788] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6792] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6791] setpgid(0, 0 [pid 6790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6789] <... munmap resumed>) = 0 [pid 6792] <... set_robust_list resumed>) = 0 [pid 6791] <... setpgid resumed>) = 0 [pid 6790] <... openat resumed>) = 3 [pid 6789] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6792] rt_sigprocmask(SIG_SETMASK, [], [pid 6791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 159.002840][ T6783] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.034553][ T58] hfsplus: b-tree write err: -5, ino 4 [ 159.037278][ T6783] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6790] write(3, "1000", 4 [pid 6789] <... openat resumed>) = 4 [pid 6792] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6791] <... openat resumed>) = 3 [pid 6790] <... write resumed>) = 4 [pid 6792] memfd_create("syzkaller", 0 [pid 6791] write(3, "1000", 4 [pid 6790] close(3 [pid 6792] <... memfd_create resumed>) = 3 [pid 6791] <... write resumed>) = 4 [pid 6790] <... close resumed>) = 0 [pid 6792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6791] close(3 [pid 6790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6789] ioctl(4, LOOP_SET_FD, 3 [pid 6791] <... close resumed>) = 0 [pid 6791] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6792] <... mmap resumed>) = 0x7efd74b1c000 [pid 6791] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6790] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6791] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6790] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6791] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6791] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6790] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6790] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6791] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6791] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6790] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6791] <... mprotect resumed>) = 0 [pid 6790] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6791] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6790] <... mprotect resumed>) = 0 [pid 6791] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6790] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6790] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6793 attached [pid 6792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5065] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6791] <... clone3 resumed> => {parent_tid=[6793]}, 88) = 6793 ./strace-static-x86_64: Process 6794 attached [pid 6793] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6791] rt_sigprocmask(SIG_SETMASK, [], [pid 6790] <... clone3 resumed> => {parent_tid=[6794]}, 88) = 6794 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6794] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6793] <... rseq resumed>) = 0 [pid 6791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6790] rt_sigprocmask(SIG_SETMASK, [], [pid 6794] <... rseq resumed>) = 0 [pid 6793] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6791] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6794] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6793] <... set_robust_list resumed>) = 0 [pid 6791] <... futex resumed>) = 0 [ 159.090289][ T6783] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.107576][ T6789] loop3: detected capacity change from 0 to 1024 [pid 6790] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(AT_FDCWD, "./94/bus", [pid 6794] <... set_robust_list resumed>) = 0 [pid 6793] rt_sigprocmask(SIG_SETMASK, [], [pid 6791] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6790] <... futex resumed>) = 0 [pid 6789] <... ioctl resumed>) = 0 [pid 6783] <... write resumed>) = 57344 [pid 6790] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6789] close(3 [pid 6783] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6794] rt_sigprocmask(SIG_SETMASK, [], [pid 6793] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6789] <... close resumed>) = 0 [pid 6783] <... futex resumed>) = 0 [pid 6789] mkdir("./bus", 0777 [pid 5065] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6794] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6793] memfd_create("syzkaller", 0 [pid 6783] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6782] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6794] memfd_create("syzkaller", 0 [pid 6793] <... memfd_create resumed>) = 3 [pid 6789] <... mkdir resumed>) = 0 [pid 6787] <... futex resumed>) = ? [pid 6783] <... futex resumed>) = ? [pid 6782] <... exit_group resumed>) = ? [pid 6794] <... memfd_create resumed>) = 3 [pid 6793] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6789] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6787] +++ exited with 0 +++ [pid 6783] +++ exited with 0 +++ [pid 6782] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6794] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6793] <... mmap resumed>) = 0x7efd74b1c000 [pid 6794] <... mmap resumed>) = 0x7efd74b1c000 [pid 6793] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5065] <... openat resumed>) = 4 [pid 6794] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6782, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5065] newfstatat(4, "", [pid 5066] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(4, [pid 6794] <... write resumed>) = 524288 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6793] <... write resumed>) = 524288 [pid 6792] <... write resumed>) = 524288 [pid 6789] <... mount resumed>) = 0 [pid 6789] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] newfstatat(3, "", [pid 5065] getdents64(4, [pid 6792] munmap(0x7efd74b1c000, 138412032 [pid 6789] <... openat resumed>) = 3 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6792] <... munmap resumed>) = 0 [pid 5065] close(4 [pid 6792] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6789] chdir("./bus" [pid 5066] getdents64(3, [pid 5065] <... close resumed>) = 0 [pid 6792] <... openat resumed>) = 4 [pid 6789] <... chdir resumed>) = 0 [pid 6792] ioctl(4, LOOP_SET_FD, 3 [pid 6789] ioctl(4, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] rmdir("./94/bus" [pid 6789] <... ioctl resumed>) = 0 [pid 6789] close(4 [pid 5066] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 6789] <... close resumed>) = 0 [pid 6794] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6794] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6789] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6794] <... openat resumed>) = 4 [pid 6794] ioctl(4, LOOP_SET_FD, 3 [pid 6793] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6789] <... futex resumed>) = 1 [pid 6786] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6786] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(AT_FDCWD, "./94/binderfs", [pid 6789] creat("./bus", 000 [pid 6786] <... futex resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6793] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6789] <... creat resumed>) = 4 [pid 6786] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] unlink("./94/binderfs" [pid 6793] ioctl(4, LOOP_SET_FD, 3 [pid 6789] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6786] <... futex resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 6794] <... ioctl resumed>) = 0 [pid 6792] <... ioctl resumed>) = 0 [pid 6789] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6786] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] getdents64(3, [pid 6786] <... futex resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6786] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] close(3 [pid 6792] close(3 [pid 6794] <... close resumed>) = 0 [pid 6792] <... close resumed>) = 0 [pid 5065] close(3 [pid 6794] mkdir("./bus", 0777 [pid 6792] mkdir("./bus", 0777 [pid 5065] <... close resumed>) = 0 [pid 6794] <... mkdir resumed>) = 0 [pid 6792] <... mkdir resumed>) = 0 [pid 6794] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] rmdir("./94" [pid 6792] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./95", 0777 [pid 6794] <... mount resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6794] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6794] chdir("./bus" [pid 6793] <... ioctl resumed>) = 0 [pid 6794] <... chdir resumed>) = 0 [pid 6793] close(3 [pid 5065] close(3 [pid 6794] ioctl(4, LOOP_CLR_FD [pid 6793] <... close resumed>) = 0 [pid 6794] <... ioctl resumed>) = 0 [pid 6793] mkdir("./bus", 0777 [pid 6792] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 6794] close(4 [pid 6793] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [ 159.203395][ T6792] loop4: detected capacity change from 0 to 1024 [ 159.218807][ T1094] hfsplus: b-tree write err: -5, ino 4 [ 159.221975][ T6794] loop2: detected capacity change from 0 to 1024 [ 159.234253][ T6793] loop5: detected capacity change from 0 to 1024 [pid 6792] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6792] <... openat resumed>) = 3 [pid 6794] <... close resumed>) = 0 [pid 6792] chdir("./bus" [pid 6794] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6792] <... chdir resumed>) = 0 [pid 6794] <... futex resumed>) = 1 [pid 6792] ioctl(4, LOOP_CLR_FD [pid 6790] <... futex resumed>) = 0 [pid 6792] <... ioctl resumed>) = 0 [pid 6790] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6792] close(4 [pid 6790] <... futex resumed>) = 0 [pid 6792] <... close resumed>) = 0 [pid 6790] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6792] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6793] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6792] <... futex resumed>) = 1 [pid 6788] <... futex resumed>) = 0 [pid 6794] creat("./bus", 000 [pid 6788] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6795 attached [pid 6794] <... creat resumed>) = 4 [pid 6793] <... mount resumed>) = 0 [pid 6792] creat("./bus", 000 [pid 6786] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6795 [pid 6792] <... creat resumed>) = 4 [pid 6788] <... futex resumed>) = 0 [pid 6793] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6792] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6794] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6793] <... openat resumed>) = 3 [pid 6792] <... futex resumed>) = 0 [pid 6788] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5066] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6792] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6788] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6788] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] newfstatat(AT_FDCWD, "./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5066] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6795] set_robust_list(0x555555fbc6a0, 24 [pid 6786] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 6795] <... set_robust_list resumed>) = 0 [pid 6794] <... futex resumed>) = 1 [pid 6793] chdir("./bus" [pid 6790] <... futex resumed>) = 0 [pid 6786] <... futex resumed>) = 0 [pid 6795] chdir("./95" [pid 6794] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6793] <... chdir resumed>) = 0 [pid 6790] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6786] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] newfstatat(4, "", [pid 6795] <... chdir resumed>) = 0 [pid 6794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 159.270121][ T6789] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.299377][ T6789] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6793] ioctl(4, LOOP_CLR_FD [pid 6790] <... futex resumed>) = 0 [pid 6786] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6795] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6794] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6790] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 6795] <... prctl resumed>) = 0 [pid 6786] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... close resumed>) = 0 [pid 6793] <... ioctl resumed>) = 0 [pid 6793] close(4 [pid 5066] rmdir("./95/bus" [pid 6793] <... close resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6795] setpgid(0, 0 [pid 6793] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6786] <... mprotect resumed>) = 0 [pid 6795] <... setpgid resumed>) = 0 [pid 6786] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6795] <... openat resumed>) = 3 [pid 6788] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] write(3, "1000", 4 [pid 6788] <... futex resumed>) = 0 [pid 6795] <... write resumed>) = 4 [pid 6788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6795] close(3 [pid 6788] <... mmap resumed>) = 0x7efd7cefb000 [pid 6795] <... close resumed>) = 0 [pid 6788] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6795] symlink("/dev/binderfs", "./binderfs" [pid 6793] <... futex resumed>) = 1 [pid 6788] <... mprotect resumed>) = 0 [pid 6786] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6795] <... symlink resumed>) = 0 [pid 6793] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6788] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6786] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] unlink("./95/binderfs" [pid 6795] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6791] <... futex resumed>) = 0 [pid 6788] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 6791] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6788] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] getdents64(3, [pid 6795] <... futex resumed>) = 0 [pid 6793] <... futex resumed>) = 0 [pid 6791] <... futex resumed>) = 1 [pid 6790] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6795] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6793] creat("./bus", 000 [pid 6791] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6790] <... futex resumed>) = 0 [pid 6788] <... clone3 resumed> => {parent_tid=[6796]}, 88) = 6796 [pid 5066] close(3 [pid 6795] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6793] <... creat resumed>) = 4 [pid 6790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6788] rt_sigprocmask(SIG_SETMASK, [], [pid 6795] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [ 159.315200][ T6792] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.321444][ T6789] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.329706][ T6794] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.330170][ T6789] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.355926][ T6792] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6793] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] <... mmap resumed>) = 0x7efd7cefb000 ./strace-static-x86_64: Process 6796 attached [pid 6795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6793] <... futex resumed>) = 1 [pid 6791] <... futex resumed>) = 0 [pid 6788] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... close resumed>) = 0 [pid 6796] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6793] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6791] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6788] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] rmdir("./95"./strace-static-x86_64: Process 6797 attached [pid 6796] <... rseq resumed>) = 0 [pid 6795] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6791] <... futex resumed>) = 0 [pid 6790] <... mprotect resumed>) = 0 [pid 6788] <... futex resumed>) = 0 [pid 6786] <... clone3 resumed> => {parent_tid=[6797]}, 88) = 6797 [pid 5066] <... rmdir resumed>) = 0 [pid 6797] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6796] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6795] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6791] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6790] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6788] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6797] <... rseq resumed>) = 0 [pid 6796] <... set_robust_list resumed>) = 0 [pid 6795] <... mprotect resumed>) = 0 [pid 6790] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6786] rt_sigprocmask(SIG_SETMASK, [], [pid 6796] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6795] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6790] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6796] creat("./file1", 000 [pid 6795] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6797] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6786] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] mkdir("./96", 0777./strace-static-x86_64: Process 6798 attached [pid 6795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6790] <... clone3 resumed> => {parent_tid=[6798]}, 88) = 6798 [pid 5066] <... mkdir resumed>) = 0 [pid 6798] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6790] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6798] <... rseq resumed>) = 0 [pid 6795] <... clone3 resumed> => {parent_tid=[6799]}, 88) = 6799 [pid 6790] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... openat resumed>) = 3 [pid 6795] rt_sigprocmask(SIG_SETMASK, [], [pid 6790] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6790] <... futex resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 159.372440][ T6792] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.380387][ T6794] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.380960][ T6792] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.401362][ T6792] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.407770][ T6793] hfsplus: request for non-existent node 16715520 in B*Tree ./strace-static-x86_64: Process 6799 attached [pid 6798] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6795] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6786] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] close(3 [pid 6798] <... set_robust_list resumed>) = 0 [pid 6795] <... futex resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 6798] rt_sigprocmask(SIG_SETMASK, [], [pid 6795] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6799] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6798] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6786] <... futex resumed>) = 0 [pid 6799] <... rseq resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6800 [pid 6799] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6798] creat("./file1", 000 [pid 6797] <... set_robust_list resumed>) = 0 [pid 6786] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6799] <... set_robust_list resumed>) = 0 [pid 6797] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6800 attached [pid 6799] rt_sigprocmask(SIG_SETMASK, [], [pid 6797] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6788] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6799] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6797] creat("./file1", 000 [pid 6800] set_robust_list(0x555555fbc6a0, 24 [pid 6799] memfd_create("syzkaller", 0 [pid 6791] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] <... memfd_create resumed>) = 3 [pid 6800] <... set_robust_list resumed>) = 0 [pid 6791] <... futex resumed>) = 0 [pid 6800] chdir("./96" [pid 6799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6791] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6800] <... chdir resumed>) = 0 [pid 6791] <... mmap resumed>) = 0x7efd7cefb000 [pid 6800] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6791] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6800] <... prctl resumed>) = 0 [pid 6791] <... mprotect resumed>) = 0 [pid 6800] setpgid(0, 0 [pid 6799] <... mmap resumed>) = 0x7efd74b1c000 [pid 6791] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6800] <... setpgid resumed>) = 0 [pid 6791] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6791] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6800] <... openat resumed>) = 3 [pid 6790] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6791] <... clone3 resumed> => {parent_tid=[6801]}, 88) = 6801 [pid 6799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 159.410139][ T6792] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.424547][ T6789] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.435711][ T6794] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.456876][ T6789] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6791] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6801 attached [pid 6800] write(3, "1000", 4 [pid 6796] <... creat resumed>) = 5 [pid 6792] <... write resumed>) = 57344 [pid 6791] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6797] <... creat resumed>) = 5 [pid 6792] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6801] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6800] <... write resumed>) = 4 [pid 6797] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6796] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6792] <... futex resumed>) = 0 [pid 6791] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6789] <... write resumed>) = 57344 [pid 6797] <... futex resumed>) = 1 [pid 6792] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6786] <... futex resumed>) = 0 [pid 6801] <... rseq resumed>) = 0 [pid 6800] close(3 [pid 6797] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6796] <... futex resumed>) = 0 [pid 6791] <... futex resumed>) = 0 [pid 6789] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6800] <... close resumed>) = 0 [pid 6796] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6791] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6789] <... futex resumed>) = 0 [pid 6800] symlink("/dev/binderfs", "./binderfs" [pid 6789] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6801] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6800] <... symlink resumed>) = 0 [pid 6801] <... set_robust_list resumed>) = 0 [pid 6800] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6788] exit_group(0 [pid 6786] exit_group(0 [pid 6801] rt_sigprocmask(SIG_SETMASK, [], [pid 6800] <... futex resumed>) = 0 [pid 6797] <... futex resumed>) = ? [pid 6789] <... futex resumed>) = ? [pid 6786] <... exit_group resumed>) = ? [pid 6801] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6797] +++ exited with 0 +++ [pid 6796] <... futex resumed>) = ? [pid 6792] <... futex resumed>) = ? [pid 6788] <... exit_group resumed>) = ? [pid 6801] creat("./file1", 000 [pid 6800] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6796] +++ exited with 0 +++ [pid 6800] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6800] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6800] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6799] <... write resumed>) = 524288 [pid 6792] +++ exited with 0 +++ [pid 6789] +++ exited with 0 +++ [pid 6788] +++ exited with 0 +++ [pid 6786] +++ exited with 0 +++ [pid 6800] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6799] munmap(0x7efd74b1c000, 138412032 [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6788, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6786, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6800] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6799] <... munmap resumed>) = 0 [pid 6798] <... creat resumed>) = 5 [pid 6800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [ 159.466389][ T6793] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.480595][ T6794] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.506925][ T6793] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6798] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6798] <... futex resumed>) = 0 [pid 6800] <... clone3 resumed> => {parent_tid=[6802]}, 88) = 6802 [pid 6798] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6802 attached [pid 6800] rt_sigprocmask(SIG_SETMASK, [], [pid 6799] <... openat resumed>) = 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6799] ioctl(4, LOOP_SET_FD, 3 [pid 5069] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6800] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6800] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] newfstatat(3, "", [pid 6802] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6802] <... rseq resumed>) = 0 [pid 6802] set_robust_list(0x7efd7cf3c9a0, 24 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] getdents64(3, [pid 5068] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] <... openat resumed>) = 3 [pid 5069] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6802] <... set_robust_list resumed>) = 0 [pid 6799] <... ioctl resumed>) = 0 [pid 6794] <... write resumed>) = 57344 [pid 5068] getdents64(3, [pid 6802] rt_sigprocmask(SIG_SETMASK, [], [pid 6799] close(3 [pid 6794] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6802] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6801] <... creat resumed>) = 5 [pid 6799] <... close resumed>) = 0 [pid 6794] <... futex resumed>) = 0 [pid 6791] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6802] memfd_create("syzkaller", 0 [pid 6799] mkdir("./bus", 0777 [pid 6794] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6802] <... memfd_create resumed>) = 3 [pid 6799] <... mkdir resumed>) = 0 [pid 6802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6799] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6802] <... mmap resumed>) = 0x7efd74b1c000 [ 159.522210][ T6799] loop0: detected capacity change from 0 to 1024 [ 159.523485][ T6794] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.539534][ T6793] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.543530][ T6794] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.547595][ T57] hfsplus: b-tree write err: -5, ino 4 [ 159.564709][ T6793] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6801] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6790] exit_group(0 [pid 6799] <... mount resumed>) = 0 [pid 6799] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6790] <... exit_group resumed>) = ? [pid 6801] <... futex resumed>) = 0 [pid 6798] <... futex resumed>) = ? [pid 6794] <... futex resumed>) = ? [pid 6794] +++ exited with 0 +++ [pid 6801] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6799] chdir("./bus" [pid 6798] +++ exited with 0 +++ [pid 6799] <... chdir resumed>) = 0 [pid 6799] ioctl(4, LOOP_CLR_FD) = 0 [pid 6790] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6790, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5067] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] newfstatat(3, "", [pid 5069] <... umount2 resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6799] close(4 [pid 5067] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6799] <... close resumed>) = 0 [pid 6799] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6799] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6795] <... futex resumed>) = 0 [pid 6795] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... umount2 resumed>) = 0 [pid 6799] <... futex resumed>) = 0 [pid 6795] <... futex resumed>) = 1 [pid 6799] creat("./bus", 000) = 4 [pid 6795] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6799] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6795] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6799] <... futex resumed>) = 0 [pid 6795] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6799] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6802] <... write resumed>) = 524288 [pid 5069] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6793] <... write resumed>) = 57344 [pid 5069] newfstatat(AT_FDCWD, "./94/bus", [pid 5067] <... umount2 resumed>) = 0 [ 159.573314][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 159.587778][ T6793] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.606736][ T2846] hfsplus: b-tree write err: -5, ino 4 [pid 6793] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6802] munmap(0x7efd74b1c000, 138412032 [pid 6793] <... futex resumed>) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6802] <... munmap resumed>) = 0 [pid 6791] exit_group(0 [pid 5069] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6801] <... futex resumed>) = ? [pid 6791] <... exit_group resumed>) = ? [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6801] +++ exited with 0 +++ [pid 6802] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5069] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(AT_FDCWD, "./95/bus", [pid 6802] <... openat resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5068] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6802] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] getdents64(4, [pid 5068] <... openat resumed>) = 4 [pid 5068] newfstatat(4, "", [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4) = 0 [pid 5068] rmdir("./95/bus" [pid 6802] <... ioctl resumed>) = 0 [pid 6793] +++ exited with 0 +++ [pid 6791] +++ exited with 0 +++ [pid 5069] getdents64(4, [pid 5068] <... rmdir resumed>) = 0 [pid 5067] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6791, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5068] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(AT_FDCWD, "./93/bus", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] close(4 [pid 5068] newfstatat(AT_FDCWD, "./95/binderfs", [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] <... close resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] unlink("./95/binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] rmdir("./94/bus" [pid 6795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 159.636274][ T6799] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.661374][ T6802] loop1: detected capacity change from 0 to 1024 [pid 6795] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... unlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6795] <... futex resumed>) = 0 [pid 6802] close(3) = 0 [pid 6802] mkdir("./bus", 0777) = 0 [pid 6795] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 6795] <... mmap resumed>) = 0x7efd7cefb000 [pid 5067] newfstatat(4, "", [pid 6795] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5070] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] newfstatat(AT_FDCWD, "./94/binderfs", [pid 6802] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5070] <... openat resumed>) = 3 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] getdents64(4, [pid 5070] newfstatat(3, "", [pid 5069] unlink("./94/binderfs" [pid 5068] getdents64(3, [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6795] <... mprotect resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6795] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, [pid 5068] close(3 [pid 5067] getdents64(4, [pid 6795] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] getdents64(3, [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] rmdir("./95" [pid 6795] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] close(3 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 5070] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... close resumed>) = 0 [pid 5068] mkdir("./96", 0777 [pid 6802] <... mount resumed>) = 0 [pid 5069] rmdir("./94" [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6803 attached [pid 6802] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6803] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6802] <... openat resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6803] <... rseq resumed>) = 0 [pid 6795] <... clone3 resumed> => {parent_tid=[6803]}, 88) = 6803 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] rmdir("./93/bus" [pid 6795] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] mkdir("./95", 0777 [pid 6795] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6795] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6795] <... futex resumed>) = 0 [pid 6803] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6795] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6803] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] <... openat resumed>) = 3 [pid 6803] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6803] creat("./file1", 000 [pid 6802] chdir("./bus" [pid 5068] <... openat resumed>) = 3 [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] newfstatat(AT_FDCWD, "./93/binderfs", [pid 6802] <... chdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] close(3 [pid 5067] unlink("./93/binderfs" [pid 5069] <... close resumed>) = 0 [pid 6802] ioctl(4, LOOP_CLR_FD [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 6802] <... ioctl resumed>) = 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 6802] close(4 [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] getdents64(3, [pid 6802] <... close resumed>) = 0 [pid 5068] close(3 [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6802] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... close resumed>) = 0 [pid 6802] <... futex resumed>) = 1 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6802] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6800] <... futex resumed>) = 0 [pid 5067] close(3 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6805 ./strace-static-x86_64: Process 6805 attached [pid 6800] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] set_robust_list(0x555555fbc6a0, 24 [pid 6802] <... futex resumed>) = 0 [pid 6800] <... futex resumed>) = 1 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6804 [pid 5067] <... close resumed>) = 0 [pid 6800] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6802] creat("./bus", 000 [pid 5067] rmdir("./93" [pid 6802] <... creat resumed>) = 4 [pid 6805] <... set_robust_list resumed>) = 0 [pid 6802] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6804 attached [pid 6805] chdir("./96" [pid 6802] <... futex resumed>) = 1 [pid 6800] <... futex resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6805] <... chdir resumed>) = 0 [pid 6802] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6800] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] set_robust_list(0x555555fbc6a0, 24 [pid 6805] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6800] <... futex resumed>) = 0 [ 159.693735][ T6799] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.719989][ T57] hfsplus: b-tree write err: -5, ino 4 [ 159.720896][ T6799] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6800] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6805] <... prctl resumed>) = 0 [pid 6802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] mkdir("./94", 0777 [pid 6805] setpgid(0, 0 [pid 6802] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6804] <... set_robust_list resumed>) = 0 [pid 6805] <... setpgid resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6804] chdir("./95" [pid 6805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6805] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 6805] write(3, "1000", 4) = 4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6804] <... chdir resumed>) = 0 [pid 6805] close(3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6804] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6805] <... close resumed>) = 0 [pid 6795] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] <... umount2 resumed>) = 0 [pid 5067] close(3 [pid 6804] <... prctl resumed>) = 0 [pid 6805] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 6804] setpgid(0, 0) = 0 [pid 6805] <... symlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6805] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6805] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6805] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6804] <... openat resumed>) = 3 [pid 6805] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6803] <... creat resumed>) = 5 [pid 6805] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6803] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] write(3, "1000", 4 [pid 6805] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6803] <... futex resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6806 [pid 6804] <... write resumed>) = 4 [pid 6805] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6803] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6806 attached [pid 6804] close(3 [pid 6805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 5070] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6804] <... close resumed>) = 0 ./strace-static-x86_64: Process 6807 attached [pid 6806] set_robust_list(0x555555fbc6a0, 24 [pid 6804] symlink("/dev/binderfs", "./binderfs" [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6807] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5070] newfstatat(AT_FDCWD, "./95/bus", [pid 6807] <... rseq resumed>) = 0 [pid 6807] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6806] <... set_robust_list resumed>) = 0 [pid 6805] <... clone3 resumed> => {parent_tid=[6807]}, 88) = 6807 [pid 6807] <... set_robust_list resumed>) = 0 [pid 6806] chdir("./94" [pid 6805] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6807] rt_sigprocmask(SIG_SETMASK, [], [pid 6806] <... chdir resumed>) = 0 [pid 6804] <... symlink resumed>) = 0 [pid 6805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6805] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6804] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] memfd_create("syzkaller", 0 [pid 6806] <... prctl resumed>) = 0 [pid 6804] <... futex resumed>) = 0 [pid 6805] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6807] <... memfd_create resumed>) = 3 [ 159.761611][ T6799] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.787004][ T6802] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.803925][ T6799] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6806] setpgid(0, 0 [pid 6804] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6805] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 4 [pid 6807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6806] <... setpgid resumed>) = 0 [pid 6804] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6800] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5070] newfstatat(4, "", [pid 6807] <... mmap resumed>) = 0x7efd74b1c000 [pid 6806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6804] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6800] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] <... openat resumed>) = 3 [pid 6804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6800] <... futex resumed>) = 0 [pid 6800] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6806] write(3, "1000", 4 [pid 6804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6800] <... mmap resumed>) = 0x7efd7cefb000 [pid 6799] <... write resumed>) = 57344 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6806] <... write resumed>) = 4 [pid 6800] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6799] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] close(3 [pid 6800] <... mprotect resumed>) = 0 [pid 6799] <... futex resumed>) = 0 [pid 6806] <... close resumed>) = 0 [pid 6800] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6799] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6806] symlink("/dev/binderfs", "./binderfs" [pid 6800] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6806] <... symlink resumed>) = 0 [pid 6800] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6806] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6808 attached ) = 0 [pid 6800] <... clone3 resumed> => {parent_tid=[6808]}, 88) = 6808 [pid 6808] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6806] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6804] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6800] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] getdents64(4, [pid 6808] <... rseq resumed>) = 0 [pid 6806] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6800] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6808] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6807] <... write resumed>) = 524288 [ 159.819626][ T6802] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.831491][ T6799] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.839770][ T6802] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6806] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6804] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6804] <... mprotect resumed>) = 0 [pid 6795] exit_group(0 [pid 5070] getdents64(4, [pid 6806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6804] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6803] <... futex resumed>) = ? [pid 6800] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6799] <... futex resumed>) = ? [pid 6795] <... exit_group resumed>) = ? [pid 6806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6804] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6800] <... futex resumed>) = 0 [pid 6799] +++ exited with 0 +++ [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6800] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] close(4 [pid 6808] <... set_robust_list resumed>) = 0 [pid 6807] munmap(0x7efd74b1c000, 138412032 [pid 6806] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6803] +++ exited with 0 +++ [pid 6795] +++ exited with 0 +++ [pid 5070] <... close resumed>) = 0 [pid 6808] rt_sigprocmask(SIG_SETMASK, [], [pid 6806] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6804] <... clone3 resumed> => {parent_tid=[6809]}, 88) = 6809 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6795, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5070] rmdir("./95/bus" [pid 6808] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6806] <... mprotect resumed>) = 0 [pid 6804] rt_sigprocmask(SIG_SETMASK, [], [pid 6808] creat("./file1", 000 [pid 6806] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6807] <... munmap resumed>) = 0 [pid 6806] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 6806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6804] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6804] <... futex resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6810 attached ./strace-static-x86_64: Process 6809 attached [pid 6806] <... clone3 resumed> => {parent_tid=[6810]}, 88) = 6810 [pid 6807] <... openat resumed>) = 4 [pid 6804] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] newfstatat(AT_FDCWD, "./95/binderfs", [pid 5065] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6810] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6809] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6806] rt_sigprocmask(SIG_SETMASK, [], [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6810] <... rseq resumed>) = 0 [pid 6809] <... rseq resumed>) = 0 [ 159.872176][ T6802] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6808] <... creat resumed>) = 5 [pid 6807] ioctl(4, LOOP_SET_FD, 3 [pid 6806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] unlink("./95/binderfs" [pid 5065] <... openat resumed>) = 3 [pid 6810] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6809] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6808] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6806] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] <... set_robust_list resumed>) = 0 [pid 6809] <... set_robust_list resumed>) = 0 [pid 6808] <... futex resumed>) = 1 [pid 6806] <... futex resumed>) = 0 [pid 6800] <... futex resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 6810] rt_sigprocmask(SIG_SETMASK, [], [pid 6809] rt_sigprocmask(SIG_SETMASK, [], [pid 6808] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6806] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5070] <... unlink resumed>) = 0 [pid 6809] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6810] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6809] memfd_create("syzkaller", 0) = 3 [pid 6810] memfd_create("syzkaller", 0) = 3 [pid 6809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6809] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6810] <... mmap resumed>) = 0x7efd74b1c000 [pid 6810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6807] <... ioctl resumed>) = 0 [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(3, [pid 5070] close(3 [pid 6807] close(3 [pid 5070] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] rmdir("./95" [pid 6807] <... close resumed>) = 0 [pid 5065] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] mkdir("./bus", 0777 [pid 6802] <... write resumed>) = 57344 [pid 5070] <... rmdir resumed>) = 0 [pid 6802] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6802] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6807] <... mkdir resumed>) = 0 [pid 5070] mkdir("./96", 0777 [pid 6800] exit_group(0 [pid 6808] <... futex resumed>) = ? [pid 6807] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6802] <... futex resumed>) = ? [pid 6800] <... exit_group resumed>) = ? [pid 5070] <... mkdir resumed>) = 0 [pid 6810] <... write resumed>) = 524288 [pid 6808] +++ exited with 0 +++ [pid 6810] munmap(0x7efd74b1c000, 138412032 [pid 6809] <... write resumed>) = 524288 [pid 6802] +++ exited with 0 +++ [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6810] <... munmap resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6810] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6810] <... openat resumed>) = 4 [pid 6809] munmap(0x7efd74b1c000, 138412032 [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6810] ioctl(4, LOOP_SET_FD, 3 [pid 6809] <... munmap resumed>) = 0 [pid 6807] <... mount resumed>) = 0 [pid 6807] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [ 159.916558][ T6802] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.918645][ T6807] loop3: detected capacity change from 0 to 1024 [ 159.937656][ T6802] hfsplus: request for non-existent node 16715520 in B*Tree [ 159.955881][ T58] hfsplus: b-tree write err: -5, ino 4 [pid 6807] chdir("./bus"./strace-static-x86_64: Process 6811 attached [pid 6810] <... ioctl resumed>) = 0 [pid 6809] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6800] +++ exited with 0 +++ [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6811 [pid 6809] <... openat resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6800, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 6811] set_robust_list(0x555555fbc6a0, 24 [pid 6809] ioctl(4, LOOP_SET_FD, 3 [pid 6807] <... chdir resumed>) = 0 [pid 5066] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] getdents64(3, [pid 6807] ioctl(4, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6807] <... ioctl resumed>) = 0 [pid 5066] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] close(4) = 0 [pid 6807] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6805] <... futex resumed>) = 0 [pid 6807] creat("./bus", 000 [pid 6805] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] <... creat resumed>) = 4 [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6811] <... set_robust_list resumed>) = 0 [pid 6810] close(3 [pid 6807] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] chdir("./96" [pid 6810] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 6811] <... chdir resumed>) = 0 [pid 6810] mkdir("./bus", 0777 [pid 6807] <... futex resumed>) = 1 [pid 6805] <... futex resumed>) = 0 [pid 5065] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6807] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6805] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] <... mkdir resumed>) = 0 [pid 6805] <... futex resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6810] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6805] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] newfstatat(AT_FDCWD, "./95/bus", [pid 6809] <... ioctl resumed>) = 0 [pid 6809] close(3) = 0 [pid 6809] mkdir("./bus", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6809] <... mkdir resumed>) = 0 [pid 5065] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6811] setpgid(0, 0 [pid 5065] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6811] <... setpgid resumed>) = 0 [pid 6809] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 6811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [ 159.976541][ T6810] loop2: detected capacity change from 0 to 1024 [ 159.992779][ T6809] loop4: detected capacity change from 0 to 1024 [ 160.004511][ T57] hfsplus: b-tree write err: -5, ino 4 [pid 6811] write(3, "1000", 4 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6811] <... write resumed>) = 4 [pid 6810] <... mount resumed>) = 0 [pid 6811] close(3 [pid 6810] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6811] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 6810] <... openat resumed>) = 3 [pid 6811] symlink("/dev/binderfs", "./binderfs" [pid 6810] chdir("./bus" [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6810] <... chdir resumed>) = 0 [pid 6810] ioctl(4, LOOP_CLR_FD) = 0 [pid 6810] close(4) = 0 [pid 6810] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6806] <... futex resumed>) = 0 [pid 6810] creat("./bus", 000 [pid 6806] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] <... creat resumed>) = 4 [pid 6806] <... futex resumed>) = 0 [pid 6809] <... mount resumed>) = 0 [pid 6806] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... umount2 resumed>) = 0 [pid 5065] close(4 [pid 6810] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... symlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 6811] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] rmdir("./95/bus" [pid 6810] <... futex resumed>) = 1 [pid 6809] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6806] <... futex resumed>) = 0 [pid 6809] <... openat resumed>) = 3 [pid 6806] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6810] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6809] chdir("./bus" [pid 6806] <... futex resumed>) = 0 [pid 6811] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6809] <... chdir resumed>) = 0 [pid 6805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 6811] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6809] ioctl(4, LOOP_CLR_FD [pid 6806] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6805] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6811] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6809] <... ioctl resumed>) = 0 [pid 6805] <... futex resumed>) = 0 [pid 5066] newfstatat(AT_FDCWD, "./96/bus", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6809] close(4) = 0 [pid 6809] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6809] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6804] <... futex resumed>) = 0 [pid 6805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6805] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6804] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... mprotect resumed>) = 0 [ 160.032588][ T6807] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.066720][ T6807] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.069045][ T6810] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6809] <... futex resumed>) = 0 [pid 6804] <... futex resumed>) = 1 [pid 6805] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./95/binderfs", [pid 5066] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6809] creat("./bus", 000 [pid 6804] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6805] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6811] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5066] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6811] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6809] <... creat resumed>) = 4 [pid 6805] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] <... openat resumed>) = 4 [pid 5065] unlink("./95/binderfs" [pid 6809] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... clone3 resumed> => {parent_tid=[6812]}, 88) = 6812 [pid 6809] <... futex resumed>) = 1 [pid 6804] <... futex resumed>) = 0 [pid 6805] rt_sigprocmask(SIG_SETMASK, [], [pid 6809] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6804] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6804] <... futex resumed>) = 0 [pid 6805] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6805] <... futex resumed>) = 0 [pid 6805] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6812 attached [pid 6811] <... mprotect resumed>) = 0 [pid 5066] newfstatat(4, "", [pid 5065] <... unlink resumed>) = 0 [pid 6812] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053) = 0 [pid 6812] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6812] creat("./file1", 000 [pid 6806] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6806] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6806] <... futex resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 6806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6806] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6806] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 160.075288][ T6807] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.102681][ T6809] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.107318][ T6807] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.116606][ T6809] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.122848][ T6807] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6806] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6811] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] getdents64(4, [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 6813 attached [pid 6806] <... clone3 resumed> => {parent_tid=[6813]}, 88) = 6813 [pid 6813] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6806] rt_sigprocmask(SIG_SETMASK, [], [pid 6813] <... rseq resumed>) = 0 [pid 6806] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6813] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6806] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6813] <... set_robust_list resumed>) = 0 [pid 6811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6806] <... futex resumed>) = 0 [pid 5065] close(3 [pid 6813] rt_sigprocmask(SIG_SETMASK, [], [pid 6806] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6804] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6813] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6804] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6805] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... close resumed>) = 0 [pid 6813] creat("./file1", 000 [pid 6804] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6814 attached [pid 6812] <... creat resumed>) = 5 [pid 6811] <... clone3 resumed> => {parent_tid=[6814]}, 88) = 6814 [pid 6807] <... write resumed>) = 57344 [pid 6804] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] getdents64(4, [pid 5065] rmdir("./95" [pid 6812] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] <... mmap resumed>) = 0x7efd7cefb000 [pid 6812] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6804] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6804] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6804] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6815 attached [pid 6815] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6804] <... clone3 resumed> => {parent_tid=[6815]}, 88) = 6815 [pid 6815] <... rseq resumed>) = 0 [pid 6804] rt_sigprocmask(SIG_SETMASK, [], [pid 6815] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6804] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6804] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6804] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6815] <... set_robust_list resumed>) = 0 [pid 6814] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6813] <... creat resumed>) = 5 [pid 6811] rt_sigprocmask(SIG_SETMASK, [], [pid 6807] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 6805] exit_group(0 [pid 6812] <... futex resumed>) = ? [pid 6805] <... exit_group resumed>) = ? [pid 6812] +++ exited with 0 +++ [pid 6815] rt_sigprocmask(SIG_SETMASK, [], [pid 6814] <... rseq resumed>) = 0 [pid 6813] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6807] <... futex resumed>) = ? [pid 5066] close(4 [pid 5065] mkdir("./96", 0777 [pid 6815] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6815] creat("./file1", 000 [pid 6813] <... futex resumed>) = 1 [pid 6806] <... futex resumed>) = 0 [pid 6813] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... close resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 6811] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6807] +++ exited with 0 +++ [pid 6814] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6805] +++ exited with 0 +++ [ 160.132291][ T6810] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.132735][ T6807] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.152375][ T6809] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.158950][ T6810] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.161477][ T6809] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5066] rmdir("./96/bus" [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6805, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5068] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 6814] <... set_robust_list resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6814] rt_sigprocmask(SIG_SETMASK, [], [pid 6811] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 3 [pid 5066] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6814] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6811] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6809] <... write resumed>) = 57344 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] newfstatat(3, "", [pid 6814] memfd_create("syzkaller", 0 [pid 5065] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6815] <... creat resumed>) = 5 [pid 6814] <... memfd_create resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5066] newfstatat(AT_FDCWD, "./96/binderfs", [pid 5065] <... close resumed>) = 0 [pid 6814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6809] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] <... mmap resumed>) = 0x7efd74b1c000 [pid 6809] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6809] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6815] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6804] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6804] exit_group(0 [pid 5068] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6809] <... futex resumed>) = ? [pid 6804] <... exit_group resumed>) = ? [pid 5066] unlink("./96/binderfs" [pid 6815] <... futex resumed>) = ? [pid 6815] +++ exited with 0 +++ [pid 5066] <... unlink resumed>) = 0 [pid 6814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6809] +++ exited with 0 +++ [pid 6804] +++ exited with 0 +++ [pid 5066] getdents64(3, [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6804, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6816 [pid 5066] close(3) = 0 [pid 5069] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./96" [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5069] newfstatat(3, "", [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./97", 0777 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6816 attached [pid 6814] <... write resumed>) = 524288 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6816] set_robust_list(0x555555fbc6a0, 24 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 6816] <... set_robust_list resumed>) = 0 [ 160.179304][ T6809] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.193990][ T6809] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.194771][ T6810] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.215523][ T57] hfsplus: b-tree write err: -5, ino 4 [ 160.223853][ T6810] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6814] munmap(0x7efd74b1c000, 138412032 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 6816] chdir("./96" [pid 6814] <... munmap resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6816] <... chdir resumed>) = 0 [pid 6816] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6816] setpgid(0, 0./strace-static-x86_64: Process 6817 attached ) = 0 [pid 6814] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5068] <... umount2 resumed>) = 0 [pid 6816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... clone resumed>, child_tidptr=0x555555fbc690) = 6817 [pid 6817] set_robust_list(0x555555fbc6a0, 24 [pid 6814] <... openat resumed>) = 4 [pid 6817] <... set_robust_list resumed>) = 0 [pid 6816] <... openat resumed>) = 3 [pid 6814] ioctl(4, LOOP_SET_FD, 3 [pid 5068] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] <... umount2 resumed>) = 0 [pid 6817] chdir("./97" [pid 6816] write(3, "1000", 4 [pid 6810] <... write resumed>) = 57344 [pid 5068] newfstatat(AT_FDCWD, "./96/bus", [pid 6816] <... write resumed>) = 4 [pid 5069] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6817] <... chdir resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6816] close(3 [pid 6810] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6817] setpgid(0, 0 [pid 6816] <... close resumed>) = 0 [pid 6817] <... setpgid resumed>) = 0 [pid 6816] symlink("/dev/binderfs", "./binderfs" [pid 6810] <... futex resumed>) = 0 [pid 6806] exit_group(0 [pid 5069] newfstatat(AT_FDCWD, "./95/bus", [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6816] <... symlink resumed>) = 0 [pid 6814] <... ioctl resumed>) = 0 [pid 6813] <... futex resumed>) = ? [pid 6806] <... exit_group resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6817] <... openat resumed>) = 3 [pid 6816] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] close(3 [pid 6813] +++ exited with 0 +++ [pid 6810] +++ exited with 0 +++ [pid 6806] +++ exited with 0 +++ [pid 5069] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6817] write(3, "1000", 4 [pid 6816] <... futex resumed>) = 0 [pid 6814] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... openat resumed>) = 4 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6806, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 6817] <... write resumed>) = 4 [pid 6816] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6814] mkdir("./bus", 0777 [pid 5069] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] newfstatat(4, "", [pid 6817] close(3 [pid 6816] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6814] <... mkdir resumed>) = 0 [pid 5069] <... openat resumed>) = 4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 160.239335][ T58] hfsplus: b-tree write err: -5, ino 4 [ 160.272502][ T6810] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.281426][ T6814] loop5: detected capacity change from 0 to 1024 [pid 6817] <... close resumed>) = 0 [pid 6816] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6814] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 5069] newfstatat(4, "", [pid 5068] getdents64(4, [pid 6817] symlink("/dev/binderfs", "./binderfs" [pid 6816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6817] <... symlink resumed>) = 0 [pid 6816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5069] getdents64(4, [pid 5068] getdents64(4, [pid 6816] <... mmap resumed>) = 0x7efd7cf1c000 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6816] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5069] getdents64(4, [pid 6817] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] <... mprotect resumed>) = 0 [pid 6814] <... mount resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5068] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6817] <... futex resumed>) = 0 [pid 6816] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6814] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5069] close(4 [pid 5068] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6817] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6814] <... openat resumed>) = 3 [pid 5069] <... close resumed>) = 0 [pid 5068] rmdir("./96/bus" [pid 5067] <... openat resumed>) = 3 [pid 6817] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6816] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6814] chdir("./bus" [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(3, "", [pid 6817] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6814] <... chdir resumed>) = 0 [pid 5069] rmdir("./95/bus" [pid 5068] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6814] ioctl(4, LOOP_CLR_FD [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, ./strace-static-x86_64: Process 6818 attached [pid 6817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6814] <... ioctl resumed>) = 0 [pid 5069] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] newfstatat(AT_FDCWD, "./96/binderfs", [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6818] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6817] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6816] <... clone3 resumed> => {parent_tid=[6818]}, 88) = 6818 [pid 6814] close(4 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6818] <... rseq resumed>) = 0 [pid 6817] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6816] rt_sigprocmask(SIG_SETMASK, [], [pid 6814] <... close resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] unlink("./96/binderfs" [pid 5067] <... umount2 resumed>) = 0 [pid 6818] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6817] <... mprotect resumed>) = 0 [pid 6814] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... unlink resumed>) = 0 [pid 6818] <... set_robust_list resumed>) = 0 [pid 6817] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6814] <... futex resumed>) = 1 [pid 6811] <... futex resumed>) = 0 [pid 5068] getdents64(3, [pid 6818] rt_sigprocmask(SIG_SETMASK, [], [pid 6817] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6814] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6811] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6818] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6811] <... futex resumed>) = 0 [pid 5068] close(3 [pid 5067] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6819 attached [pid 6818] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6816] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6814] creat("./bus", 000 [pid 6811] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... close resumed>) = 0 [pid 6819] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6817] <... clone3 resumed> => {parent_tid=[6819]}, 88) = 6819 [pid 6816] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] <... creat resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./95/binderfs", [pid 5068] rmdir("./96" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6819] <... rseq resumed>) = 0 [pid 6818] <... futex resumed>) = 0 [pid 6817] rt_sigprocmask(SIG_SETMASK, [], [pid 6816] <... futex resumed>) = 1 [pid 6814] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 5067] newfstatat(AT_FDCWD, "./94/bus", [pid 6819] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6818] memfd_create("syzkaller", 0 [pid 6817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6816] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6814] <... futex resumed>) = 1 [pid 6811] <... futex resumed>) = 0 [pid 5069] unlink("./95/binderfs" [pid 5068] mkdir("./97", 0777 [pid 6819] <... set_robust_list resumed>) = 0 [pid 6818] <... memfd_create resumed>) = 3 [pid 6817] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6814] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6811] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] <... unlink resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6819] rt_sigprocmask(SIG_SETMASK, [], [pid 6818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6817] <... futex resumed>) = 0 [pid 6814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6811] <... futex resumed>) = 0 [pid 5069] getdents64(3, [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6819] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6818] <... mmap resumed>) = 0x7efd74b1c000 [pid 6817] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6814] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6811] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5068] <... openat resumed>) = 3 [pid 6819] memfd_create("syzkaller", 0 [pid 5068] ioctl(3, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5068] close(3) = 0 [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6819] <... memfd_create resumed>) = 3 [ 160.372667][ T57] hfsplus: b-tree write err: -5, ino 4 [pid 6819] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... openat resumed>) = 4 [pid 6819] <... mmap resumed>) = 0x7efd74b1c000 [pid 5069] close(3) = 0 [pid 5069] rmdir("./95" [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6820 [pid 5067] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5067] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5069] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 ./strace-static-x86_64: Process 6820 attached [pid 5069] mkdir("./96", 0777 [pid 5067] rmdir("./94/bus" [pid 5069] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6820] set_robust_list(0x555555fbc6a0, 24 [pid 6818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6820] <... set_robust_list resumed>) = 0 [pid 6818] <... write resumed>) = 524288 [pid 5069] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] ioctl(3, LOOP_CLR_FD [pid 5067] newfstatat(AT_FDCWD, "./94/binderfs", [pid 6820] chdir("./97" [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6820] <... chdir resumed>) = 0 [pid 6819] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5069] close(3 [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6820] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6819] <... write resumed>) = 524288 [pid 5069] <... close resumed>) = 0 [pid 5067] unlink("./94/binderfs" [pid 6820] <... prctl resumed>) = 0 [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... unlink resumed>) = 0 [pid 6820] setpgid(0, 0 [pid 5067] getdents64(3, [pid 6811] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6811] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] <... setpgid resumed>) = 0 [pid 6811] <... futex resumed>) = 0 [pid 6820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6821 attached [pid 6820] <... openat resumed>) = 3 [pid 6811] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6821 [pid 6820] write(3, "1000", 4 [pid 6811] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6821] set_robust_list(0x555555fbc6a0, 24 [pid 6820] <... write resumed>) = 4 [pid 6811] <... mprotect resumed>) = 0 [ 160.425137][ T6814] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] close(3 [pid 6811] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5067] <... close resumed>) = 0 [pid 6811] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6821] <... set_robust_list resumed>) = 0 [pid 6820] close(3 [pid 5067] rmdir("./94"./strace-static-x86_64: Process 6822 attached [pid 6821] chdir("./96" [pid 6820] <... close resumed>) = 0 [pid 6818] munmap(0x7efd74b1c000, 138412032 [pid 6811] <... clone3 resumed> => {parent_tid=[6822]}, 88) = 6822 [pid 5067] <... rmdir resumed>) = 0 [pid 6822] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6821] <... chdir resumed>) = 0 [pid 6820] symlink("/dev/binderfs", "./binderfs" [pid 6818] <... munmap resumed>) = 0 [pid 6811] rt_sigprocmask(SIG_SETMASK, [], [pid 5067] mkdir("./95", 0777 [pid 6822] <... rseq resumed>) = 0 [pid 6821] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6820] <... symlink resumed>) = 0 [pid 6818] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6811] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6822] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6821] <... prctl resumed>) = 0 [pid 6820] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] <... openat resumed>) = 4 [pid 6811] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6822] <... set_robust_list resumed>) = 0 [pid 6821] setpgid(0, 0 [pid 6820] <... futex resumed>) = 0 [pid 6818] ioctl(4, LOOP_SET_FD, 3 [pid 6811] <... futex resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6822] rt_sigprocmask(SIG_SETMASK, [], [pid 6821] <... setpgid resumed>) = 0 [pid 6820] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6819] munmap(0x7efd74b1c000, 138412032 [pid 6811] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6822] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6820] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6819] <... munmap resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6822] creat("./file1", 000 [pid 6821] <... openat resumed>) = 3 [pid 6820] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6819] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6821] write(3, "1000", 4 [pid 6820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6819] <... openat resumed>) = 4 [pid 5067] close(3 [pid 6821] <... write resumed>) = 4 [pid 6820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6819] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... close resumed>) = 0 [pid 6821] close(3 [pid 6820] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6821] <... close resumed>) = 0 [ 160.466650][ T6814] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.489694][ T6818] loop0: detected capacity change from 0 to 1024 [ 160.504557][ T6819] loop1: detected capacity change from 0 to 1024 [pid 6820] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6821] symlink("/dev/binderfs", "./binderfs" [pid 6820] <... mprotect resumed>) = 0 [pid 6821] <... symlink resumed>) = 0 [pid 6820] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6818] <... ioctl resumed>) = 0 [pid 6821] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6821] <... futex resumed>) = 0 [pid 6820] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6821] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, ./strace-static-x86_64: Process 6824 attached NULL, 8) = 0 [pid 6818] close(3 [pid 6824] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6821] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6820] <... clone3 resumed> => {parent_tid=[6824]}, 88) = 6824 [pid 6818] <... close resumed>) = 0 [pid 6824] <... rseq resumed>) = 0 [pid 6821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6820] rt_sigprocmask(SIG_SETMASK, [], [pid 6818] mkdir("./bus", 0777 [pid 6824] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6818] <... mkdir resumed>) = 0 [pid 6824] <... set_robust_list resumed>) = 0 [pid 6821] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6820] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... ioctl resumed>) = 0 [pid 6818] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6821] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6820] <... futex resumed>) = 0 [pid 6819] close(3 [pid 6824] rt_sigprocmask(SIG_SETMASK, [], [pid 6821] <... mprotect resumed>) = 0 [pid 6820] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6819] <... close resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6823 [pid 6824] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6821] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6819] mkdir("./bus", 0777 [pid 6824] memfd_create("syzkaller", 0 [pid 6821] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6819] <... mkdir resumed>) = 0 [pid 6824] <... memfd_create resumed>) = 3 [pid 6821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6825 attached [pid 6824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6811] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 6823 attached [pid 6825] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6824] <... mmap resumed>) = 0x7efd74b1c000 [pid 6821] <... clone3 resumed> => {parent_tid=[6825]}, 88) = 6825 [pid 6819] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6825] <... rseq resumed>) = 0 [pid 6823] set_robust_list(0x555555fbc6a0, 24 [pid 6821] rt_sigprocmask(SIG_SETMASK, [], [pid 6825] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6825] <... set_robust_list resumed>) = 0 [pid 6823] <... set_robust_list resumed>) = 0 [pid 6824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6822] <... creat resumed>) = 5 [pid 6821] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... mount resumed>) = 0 [pid 6818] <... mount resumed>) = 0 [pid 6825] rt_sigprocmask(SIG_SETMASK, [], [pid 6822] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... futex resumed>) = 0 [pid 6818] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6819] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6825] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6823] chdir("./95" [pid 6822] <... futex resumed>) = 0 [pid 6821] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6825] memfd_create("syzkaller", 0 [pid 6823] <... chdir resumed>) = 0 [pid 6822] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6819] <... openat resumed>) = 3 [pid 6818] <... openat resumed>) = 3 [pid 6825] <... memfd_create resumed>) = 3 [pid 6823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6819] chdir("./bus" [pid 6818] chdir("./bus" [pid 6819] <... chdir resumed>) = 0 [pid 6818] <... chdir resumed>) = 0 [pid 6819] ioctl(4, LOOP_CLR_FD [pid 6818] ioctl(4, LOOP_CLR_FD [pid 6819] <... ioctl resumed>) = 0 [pid 6818] <... ioctl resumed>) = 0 [pid 6819] close(4 [pid 6818] close(4 [pid 6819] <... close resumed>) = 0 [pid 6818] <... close resumed>) = 0 [pid 6819] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] <... futex resumed>) = 1 [pid 6818] <... futex resumed>) = 1 [pid 6817] <... futex resumed>) = 0 [pid 6816] <... futex resumed>) = 0 [ 160.513105][ T6814] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.520650][ T6814] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6825] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6823] <... prctl resumed>) = 0 [pid 6819] creat("./bus", 000 [pid 6818] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6825] <... mmap resumed>) = 0x7efd74b1c000 [pid 6823] setpgid(0, 0 [pid 6817] <... futex resumed>) = 0 [pid 6816] <... futex resumed>) = 0 [pid 6825] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6823] <... setpgid resumed>) = 0 [pid 6819] <... creat resumed>) = 4 [pid 6818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6817] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6816] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6823] write(3, "1000", 4) = 4 [pid 6819] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6818] creat("./bus", 000 [pid 6823] close(3) = 0 [pid 6824] <... write resumed>) = 524288 [pid 6818] <... creat resumed>) = 4 [pid 6823] symlink("/dev/binderfs", "./binderfs" [pid 6824] munmap(0x7efd74b1c000, 138412032 [pid 6818] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6816] <... futex resumed>) = 0 [pid 6823] <... symlink resumed>) = 0 [pid 6819] <... futex resumed>) = 1 [pid 6818] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] <... futex resumed>) = 0 [pid 6816] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6819] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6817] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] <... futex resumed>) = 0 [pid 6823] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6824] <... munmap resumed>) = 0 [ 160.562987][ T6814] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.574759][ T6814] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.599144][ T6818] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6818] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6817] <... futex resumed>) = 0 [pid 6816] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6825] <... write resumed>) = 524288 [pid 6823] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6824] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6823] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6817] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6814] <... write resumed>) = 57344 [pid 6823] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6814] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6811] exit_group(0 [pid 6822] <... futex resumed>) = ? [pid 6811] <... exit_group resumed>) = ? [pid 6823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6824] <... openat resumed>) = 4 [pid 6822] +++ exited with 0 +++ [pid 6814] +++ exited with 0 +++ [pid 6811] +++ exited with 0 +++ [pid 6825] munmap(0x7efd74b1c000, 138412032 [pid 6823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6824] ioctl(4, LOOP_SET_FD, 3 [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6811, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5070] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5070] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5070] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6825] <... munmap resumed>) = 0 [pid 6823] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6824] <... ioctl resumed>) = 0 [pid 6825] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6823] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6824] close(3 [pid 6823] <... mprotect resumed>) = 0 [pid 6824] <... close resumed>) = 0 [pid 6825] <... openat resumed>) = 4 [pid 6824] mkdir("./bus", 0777 [pid 6823] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6824] <... mkdir resumed>) = 0 [pid 6823] <... clone3 resumed> => {parent_tid=[6826]}, 88) = 6826 [pid 6823] rt_sigprocmask(SIG_SETMASK, [], [pid 6824] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, ""./strace-static-x86_64: Process 6826 attached [pid 6823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6826] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6823] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] <... rseq resumed>) = 0 [pid 6823] <... futex resumed>) = 0 [pid 6826] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6825] ioctl(4, LOOP_SET_FD, 3 [pid 6826] <... set_robust_list resumed>) = 0 [pid 6823] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6816] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6816] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6816] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6816] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6827]}, 88) = 6827 [pid 6816] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 6827 attached NULL, 8) = 0 [pid 6827] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6816] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6827] <... rseq resumed>) = 0 [pid 6817] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6816] <... futex resumed>) = 0 [pid 6827] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6817] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6827] <... set_robust_list resumed>) = 0 [ 160.610860][ T6819] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.628726][ T6818] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.630107][ T6819] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.637287][ T6824] loop3: detected capacity change from 0 to 1024 [ 160.651773][ T57] hfsplus: b-tree write err: -5, ino 4 [pid 6817] <... futex resumed>) = 0 [pid 6827] rt_sigprocmask(SIG_SETMASK, [], [pid 6817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6827] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6826] rt_sigprocmask(SIG_SETMASK, [], [pid 6817] <... mmap resumed>) = 0x7efd7cefb000 [pid 5070] <... umount2 resumed>) = 0 [pid 6827] creat("./file1", 000 [pid 6826] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6817] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6826] memfd_create("syzkaller", 0 [pid 6825] <... ioctl resumed>) = 0 [pid 6817] <... mprotect resumed>) = 0 [pid 5070] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6826] <... memfd_create resumed>) = 3 [pid 6817] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6824] <... mount resumed>) = 0 [pid 6817] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6826] <... mmap resumed>) = 0x7efd74b1c000 [pid 6817] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5070] newfstatat(AT_FDCWD, "./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 160.668436][ T6825] loop4: detected capacity change from 0 to 1024 [ 160.688273][ T6818] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.699195][ T6819] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6825] close(3 [pid 6824] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6817] <... clone3 resumed> => {parent_tid=[6828]}, 88) = 6828 [pid 6816] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6817] rt_sigprocmask(SIG_SETMASK, [], [pid 6824] <... openat resumed>) = 3 [pid 6825] <... close resumed>) = 0 [pid 6817] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6825] mkdir("./bus", 0777 [pid 6824] chdir("./bus" [pid 6817] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6828 attached [pid 6825] <... mkdir resumed>) = 0 [pid 6824] <... chdir resumed>) = 0 [pid 6817] <... futex resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6828] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6824] ioctl(4, LOOP_CLR_FD [pid 6817] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... openat resumed>) = 4 [pid 6828] <... rseq resumed>) = 0 [pid 6824] <... ioctl resumed>) = 0 [pid 5070] newfstatat(4, "", [pid 6828] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6824] close(4 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6825] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6828] <... set_robust_list resumed>) = 0 [pid 6824] <... close resumed>) = 0 [pid 5070] getdents64(4, [pid 6828] rt_sigprocmask(SIG_SETMASK, [], [pid 6824] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6828] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6824] <... futex resumed>) = 1 [pid 6820] <... futex resumed>) = 0 [pid 5070] getdents64(4, [pid 6828] creat("./file1", 000 [pid 6827] <... creat resumed>) = 5 [pid 6824] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6820] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6828] <... creat resumed>) = 5 [pid 6827] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6820] <... futex resumed>) = 0 [pid 5070] close(4 [pid 6828] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] <... write resumed>) = 524288 [pid 6825] <... mount resumed>) = 0 [pid 6824] creat("./bus", 000 [pid 6820] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5070] <... close resumed>) = 0 [pid 6828] <... futex resumed>) = 1 [pid 6827] <... futex resumed>) = 0 [pid 6817] <... futex resumed>) = 0 [pid 6828] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6827] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [ 160.714537][ T6818] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.722466][ T6819] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.751453][ T6819] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.758789][ T6819] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5070] rmdir("./96/bus" [pid 6824] <... creat resumed>) = 4 [pid 5070] <... rmdir resumed>) = 0 [pid 5070] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6825] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6824] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] munmap(0x7efd74b1c000, 138412032 [pid 6824] <... futex resumed>) = 1 [pid 6820] <... futex resumed>) = 0 [pid 5070] newfstatat(AT_FDCWD, "./96/binderfs", [pid 6824] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6820] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6826] <... munmap resumed>) = 0 [pid 6825] <... openat resumed>) = 3 [pid 6820] <... futex resumed>) = 0 [pid 5070] unlink("./96/binderfs" [pid 6826] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6825] chdir("./bus" [pid 6820] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6826] <... openat resumed>) = 4 [pid 6825] <... chdir resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 6826] ioctl(4, LOOP_SET_FD, 3 [pid 6825] ioctl(4, LOOP_CLR_FD [pid 5070] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] close(3) = 0 [pid 5070] rmdir("./96") = 0 [pid 5070] mkdir("./97", 0777) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6825] <... ioctl resumed>) = 0 [pid 5070] <... openat resumed>) = 3 [pid 6825] close(4 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6825] <... close resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5070] close(3) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6829 ./strace-static-x86_64: Process 6829 attached [pid 6819] <... write resumed>) = 57344 [pid 6829] set_robust_list(0x555555fbc6a0, 24 [pid 6819] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... set_robust_list resumed>) = 0 [pid 6819] <... futex resumed>) = 0 [pid 6829] chdir("./97" [pid 6819] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6817] exit_group(0 [pid 6825] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... chdir resumed>) = 0 [pid 6828] <... futex resumed>) = ? [pid 6819] <... futex resumed>) = ? [pid 6817] <... exit_group resumed>) = ? [pid 6825] <... futex resumed>) = 1 [pid 6828] +++ exited with 0 +++ [pid 6821] <... futex resumed>) = 0 [pid 6819] +++ exited with 0 +++ [pid 6829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6829] setpgid(0, 0 [pid 6826] <... ioctl resumed>) = 0 [pid 6825] creat("./bus", 000 [pid 6821] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] <... setpgid resumed>) = 0 [pid 6817] +++ exited with 0 +++ [pid 6821] <... futex resumed>) = 0 [pid 6829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6826] close(3 [pid 6825] <... creat resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6817, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6829] <... openat resumed>) = 3 [pid 6826] <... close resumed>) = 0 [pid 6821] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6818] <... write resumed>) = 57344 [pid 6829] write(3, "1000", 4) = 4 [pid 6826] mkdir("./bus", 0777 [pid 6825] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6818] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6816] exit_group(0 [pid 6827] <... futex resumed>) = ? [pid 6816] <... exit_group resumed>) = ? [pid 6827] +++ exited with 0 +++ [pid 6826] <... mkdir resumed>) = 0 [pid 6825] <... futex resumed>) = 1 [pid 6821] <... futex resumed>) = 0 [pid 6820] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6825] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] <... futex resumed>) = 0 [pid 5066] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6829] close(3 [pid 6825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6821] <... futex resumed>) = 0 [pid 6820] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5066] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6829] <... close resumed>) = 0 [pid 6825] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6821] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6820] <... mmap resumed>) = 0x7efd7cefb000 [pid 6818] <... futex resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 6829] symlink("/dev/binderfs", "./binderfs" [pid 6820] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6818] +++ exited with 0 +++ [pid 6816] +++ exited with 0 +++ [pid 5066] newfstatat(3, "", [pid 6829] <... symlink resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6829] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] getdents64(3, [pid 6829] <... futex resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6829] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5066] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6829] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6829] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 6829] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6829] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6816, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 6820] <... mprotect resumed>) = 0 [ 160.773669][ T6818] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.788519][ T6826] loop2: detected capacity change from 0 to 1024 [ 160.799390][ T6818] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.802337][ T6824] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6820] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6829] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6820] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0}./strace-static-x86_64: Process 6830 attached [pid 6820] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6831 attached [pid 6830] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6829] <... clone3 resumed> => {parent_tid=[6830]}, 88) = 6830 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6831] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6830] <... rseq resumed>) = 0 [pid 6829] rt_sigprocmask(SIG_SETMASK, [], [pid 6826] <... mount resumed>) = 0 [pid 6820] <... clone3 resumed> => {parent_tid=[6831]}, 88) = 6831 [pid 6831] <... rseq resumed>) = 0 [pid 6830] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6829] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6831] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6830] <... set_robust_list resumed>) = 0 [pid 6829] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6820] rt_sigprocmask(SIG_SETMASK, [], [pid 6826] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6820] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... openat resumed>) = 3 [pid 6831] <... set_robust_list resumed>) = 0 [pid 6830] rt_sigprocmask(SIG_SETMASK, [], [pid 6829] <... futex resumed>) = 0 [pid 6820] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] newfstatat(3, "", [pid 6831] rt_sigprocmask(SIG_SETMASK, [], [pid 6830] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6829] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6826] <... openat resumed>) = 3 [pid 6820] <... futex resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6820] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] getdents64(3, [pid 6826] chdir("./bus" [pid 6831] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6830] memfd_create("syzkaller", 0 [pid 6826] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6831] creat("./file1", 000 [pid 6830] <... memfd_create resumed>) = 3 [pid 6826] ioctl(4, LOOP_CLR_FD [pid 6821] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6821] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6830] <... mmap resumed>) = 0x7efd74b1c000 [pid 6826] <... ioctl resumed>) = 0 [pid 6821] <... futex resumed>) = 0 [pid 6830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6826] close(4 [pid 6821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6826] <... close resumed>) = 0 [pid 6821] <... mmap resumed>) = 0x7efd7cefb000 [ 160.853668][ T6825] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.869458][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 160.871049][ T6824] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.876736][ T6825] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6826] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6823] <... futex resumed>) = 0 [pid 6821] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] <... umount2 resumed>) = 0 [pid 6830] <... write resumed>) = 524288 [pid 6826] creat("./bus", 000 [pid 6823] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... mprotect resumed>) = 0 [pid 6823] <... futex resumed>) = 0 [pid 6826] <... creat resumed>) = 4 [pid 6823] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6821] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6821] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6821] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./97/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6826] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... clone3 resumed> => {parent_tid=[6832]}, 88) = 6832 [pid 5066] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6831] <... creat resumed>) = 5 [pid 6826] <... futex resumed>) = 1 [pid 6823] <... futex resumed>) = 0 [pid 6821] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6831] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6832 attached [pid 6831] <... futex resumed>) = 1 [pid 6832] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6831] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... openat resumed>) = 4 [pid 6832] <... rseq resumed>) = 0 [pid 6832] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5066] newfstatat(4, "", [pid 6832] <... set_robust_list resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6832] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] getdents64(4, [pid 6832] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6832] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6830] munmap(0x7efd74b1c000, 138412032 [pid 5066] getdents64(4, [pid 6830] <... munmap resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./97/bus" [pid 6826] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6823] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6821] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6820] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6830] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 160.908611][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 160.927843][ T6825] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.942115][ T6824] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.951699][ T6824] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6830] ioctl(4, LOOP_SET_FD, 3 [pid 6823] <... futex resumed>) = 0 [pid 6821] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6823] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6832] <... futex resumed>) = 0 [pid 6821] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6832] creat("./file1", 000 [pid 5066] unlink("./97/binderfs") = 0 [pid 5066] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./97") = 0 [pid 5066] mkdir("./98", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fbc690) = 6833 ./strace-static-x86_64: Process 6833 attached [pid 6832] <... creat resumed>) = 5 [pid 5065] <... umount2 resumed>) = 0 [ 160.954668][ T6830] loop5: detected capacity change from 0 to 1024 [ 160.966476][ T6825] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.991163][ T6824] hfsplus: request for non-existent node 16715520 in B*Tree [ 160.998874][ T6824] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6832] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] set_robust_list(0x555555fbc6a0, 24 [pid 6832] <... futex resumed>) = 1 [pid 6833] <... set_robust_list resumed>) = 0 [pid 6832] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6833] chdir("./98") = 0 [pid 6830] <... ioctl resumed>) = 0 [pid 6833] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6830] close(3 [pid 6833] <... prctl resumed>) = 0 [pid 6830] <... close resumed>) = 0 [pid 6833] setpgid(0, 0 [pid 6830] mkdir("./bus", 0777 [pid 6833] <... setpgid resumed>) = 0 [pid 6830] <... mkdir resumed>) = 0 [pid 6833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6833] write(3, "1000", 4) = 4 [pid 6833] close(3) = 0 [pid 6830] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6821] <... futex resumed>) = 0 [pid 5065] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6833] symlink("/dev/binderfs", "./binderfs" [pid 6823] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] <... symlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6833] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = 0 [pid 6833] <... futex resumed>) = 0 [pid 6830] <... mount resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./96/bus", [pid 6833] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6830] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6833] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6830] <... openat resumed>) = 3 [pid 6823] <... mmap resumed>) = 0x7efd7cefb000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6833] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6830] chdir("./bus" [pid 6833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6830] <... chdir resumed>) = 0 [pid 6833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6830] ioctl(4, LOOP_CLR_FD [pid 6823] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5065] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6833] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6830] <... ioctl resumed>) = 0 [pid 6823] <... mprotect resumed>) = 0 [pid 6833] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6830] close(4 [pid 6823] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6833] <... mprotect resumed>) = 0 [pid 6823] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5065] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6833] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6830] <... close resumed>) = 0 [pid 6823] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 6833] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6830] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6830] <... futex resumed>) = 1 [pid 6829] <... futex resumed>) = 0 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 6834 attached [pid 6830] creat("./bus", 000 [pid 6829] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6834] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6830] <... creat resumed>) = 4 [pid 6829] <... futex resumed>) = 0 [pid 6830] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6829] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6823] <... clone3 resumed> => {parent_tid=[6834]}, 88) = 6834 [ 161.003308][ T6825] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.018355][ T6826] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.044155][ T6825] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6834] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 6835 attached [pid 6833] <... clone3 resumed> => {parent_tid=[6835]}, 88) = 6835 [pid 6830] <... futex resumed>) = 0 [pid 6829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6823] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] getdents64(4, [pid 6830] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6829] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6834] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6829] <... futex resumed>) = 0 [pid 6823] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6829] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6823] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5065] close(4 [pid 6835] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6833] rt_sigprocmask(SIG_SETMASK, [], [pid 6823] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6824] <... write resumed>) = 57344 [pid 6835] <... rseq resumed>) = 0 [pid 6833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6824] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... close resumed>) = 0 [pid 6835] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6833] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6824] <... futex resumed>) = 0 [pid 6820] exit_group(0 [pid 5065] rmdir("./96/bus" [pid 6835] <... set_robust_list resumed>) = 0 [pid 6833] <... futex resumed>) = 0 [pid 6831] <... futex resumed>) = ? [pid 6820] <... exit_group resumed>) = ? [pid 6835] rt_sigprocmask(SIG_SETMASK, [], [pid 6833] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6831] +++ exited with 0 +++ [pid 6824] +++ exited with 0 +++ [pid 5065] <... rmdir resumed>) = 0 [pid 6835] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6835] memfd_create("syzkaller", 0) = 3 [pid 6820] +++ exited with 0 +++ [pid 5065] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6834] <... set_robust_list resumed>) = 0 [pid 6834] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6834] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] newfstatat(AT_FDCWD, "./96/binderfs", [pid 6835] <... mmap resumed>) = 0x7efd74b1c000 [pid 6834] creat("./file1", 000 [pid 6825] <... write resumed>) = 57344 [pid 5068] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6820, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6825] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] unlink("./96/binderfs" [pid 6825] <... futex resumed>) = 0 [pid 6825] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6821] exit_group(0 [pid 6832] <... futex resumed>) = ? [pid 6825] <... futex resumed>) = ? [pid 6821] <... exit_group resumed>) = ? [pid 5065] <... unlink resumed>) = 0 [pid 6832] +++ exited with 0 +++ [pid 6825] +++ exited with 0 +++ [pid 6821] +++ exited with 0 +++ [pid 5065] getdents64(3, [pid 5068] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5068] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 161.064820][ T6826] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.089784][ T6830] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5068] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(3, 0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5068] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6829] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6821, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6829] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6829] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5069] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5065] <... close resumed>) = 0 [pid 5069] <... openat resumed>) = 3 [pid 6835] <... write resumed>) = 524288 [pid 6829] <... mmap resumed>) = 0x7efd7cefb000 [pid 5069] newfstatat(3, "", [pid 5065] rmdir("./96" [pid 6829] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6829] <... mprotect resumed>) = 0 [pid 5069] getdents64(3, [pid 5065] <... rmdir resumed>) = 0 [pid 6829] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6829] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6836]}, 88) = 6836 [pid 5069] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5065] mkdir("./97", 0777 [pid 6829] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6829] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6829] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6836 attached [pid 6835] munmap(0x7efd74b1c000, 138412032 [pid 5065] <... mkdir resumed>) = 0 [pid 6835] <... munmap resumed>) = 0 [ 161.115576][ T6826] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.126808][ T58] hfsplus: b-tree write err: -5, ino 4 [ 161.142343][ T6830] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.146259][ T6826] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6835] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6835] ioctl(4, LOOP_SET_FD, 3 [pid 6836] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6836] <... rseq resumed>) = 0 [pid 6836] set_robust_list(0x7efd7cf1b9a0, 24 [pid 5065] <... openat resumed>) = 3 [pid 6836] <... set_robust_list resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 6836] rt_sigprocmask(SIG_SETMASK, [], [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6836] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5065] close(3 [pid 6836] creat("./file1", 000 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6835] <... ioctl resumed>) = 0 [pid 6829] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6835] close(3) = 0 [pid 6835] mkdir("./bus", 0777) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x555555fbc690) = 6837 ./strace-static-x86_64: Process 6837 attached [ 161.173606][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 161.180091][ T6835] loop1: detected capacity change from 0 to 1024 [ 161.187956][ T6830] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6837] set_robust_list(0x555555fbc6a0, 24 [pid 6835] mount("/dev/loop1", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6837] <... set_robust_list resumed>) = 0 [pid 6834] <... creat resumed>) = 5 [pid 6834] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] chdir("./97" [pid 6835] <... mount resumed>) = 0 [pid 6834] <... futex resumed>) = 0 [pid 5068] <... umount2 resumed>) = 0 [pid 5068] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6835] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5068] newfstatat(AT_FDCWD, "./97/bus", [pid 6835] <... openat resumed>) = 3 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6835] chdir("./bus" [pid 5068] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6835] <... chdir resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6835] ioctl(4, LOOP_CLR_FD [pid 5068] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6835] <... ioctl resumed>) = 0 [pid 5068] <... openat resumed>) = 4 [pid 6835] close(4 [pid 5068] newfstatat(4, "", [pid 6837] <... chdir resumed>) = 0 [pid 6835] <... close resumed>) = 0 [pid 6834] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6835] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5068] getdents64(4, [pid 6835] <... futex resumed>) = 1 [pid 6833] <... futex resumed>) = 0 [pid 5068] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6833] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] close(4 [pid 6835] creat("./bus", 000 [pid 6833] <... futex resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 6833] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] rmdir("./97/bus" [pid 6835] <... creat resumed>) = 4 [pid 6837] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6836] <... creat resumed>) = 5 [pid 6836] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] <... prctl resumed>) = 0 [pid 5068] <... rmdir resumed>) = 0 [pid 6837] setpgid(0, 0 [pid 5068] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6837] <... setpgid resumed>) = 0 [pid 5068] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6836] <... futex resumed>) = 0 [ 161.217013][ T6830] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.234500][ T6826] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6836] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... umount2 resumed>) = 0 [pid 5068] newfstatat(AT_FDCWD, "./97/binderfs", [pid 6835] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6835] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6833] <... futex resumed>) = 0 [pid 5068] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6833] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] unlink("./97/binderfs" [pid 6835] <... futex resumed>) = 0 [pid 6833] <... futex resumed>) = 1 [pid 5068] <... unlink resumed>) = 0 [pid 6835] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6833] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] getdents64(3, [pid 6837] <... openat resumed>) = 3 [pid 5069] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6837] write(3, "1000", 4 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6837] <... write resumed>) = 4 [pid 5069] newfstatat(AT_FDCWD, "./96/bus", [pid 6837] close(3) = 0 [pid 6826] <... write resumed>) = 57344 [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5068] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6837] symlink("/dev/binderfs", "./binderfs" [pid 6830] <... write resumed>) = 57344 [pid 6826] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5069] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 6837] <... symlink resumed>) = 0 [pid 6830] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6826] <... futex resumed>) = 0 [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] <... close resumed>) = 0 [pid 6837] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6830] <... futex resumed>) = 0 [pid 6826] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6823] exit_group(0 [pid 5069] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5068] rmdir("./97" [pid 6837] <... futex resumed>) = 0 [pid 6834] <... futex resumed>) = ? [pid 6830] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6826] <... futex resumed>) = ? [pid 6823] <... exit_group resumed>) = ? [ 161.271930][ T6830] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.272641][ T6826] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.279238][ T6830] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5069] <... openat resumed>) = 4 [pid 5068] <... rmdir resumed>) = 0 [pid 6837] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6834] +++ exited with 0 +++ [pid 6829] exit_group(0 [pid 6826] +++ exited with 0 +++ [pid 6823] +++ exited with 0 +++ [pid 5069] newfstatat(4, "", [pid 6836] <... futex resumed>) = ? [pid 6829] <... exit_group resumed>) = ? [pid 5068] mkdir("./98", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6823, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 6836] +++ exited with 0 +++ [pid 6830] <... futex resumed>) = ? [pid 5069] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5069] getdents64(4, [pid 5068] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5068] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6830] +++ exited with 0 +++ [pid 6829] +++ exited with 0 +++ [pid 5068] <... close resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5070] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6829, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5069] getdents64(4, [pid 5068] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5070] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... openat resumed>) = 3 [pid 5070] <... restart_syscall resumed>) = 0 [pid 5069] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] newfstatat(3, "", [pid 5069] close(4 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5070] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5069] rmdir("./96/bus" [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5070] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] <... openat resumed>) = 3 [pid 6837] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5070] newfstatat(3, "", [pid 5069] <... rmdir resumed>) = 0 [pid 5068] <... clone resumed>, child_tidptr=0x555555fbc690) = 6838 [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] getdents64(3, [pid 5069] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 5069] newfstatat(AT_FDCWD, "./96/binderfs", ./strace-static-x86_64: Process 6838 attached [pid 6837] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5070] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] unlink("./96/binderfs" [pid 6837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6838] set_robust_list(0x555555fbc6a0, 24 [pid 6837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6838] <... set_robust_list resumed>) = 0 [pid 6838] chdir("./98" [pid 6837] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6833] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6838] <... chdir resumed>) = 0 [pid 6837] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6833] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6833] <... futex resumed>) = 0 [pid 6838] <... prctl resumed>) = 0 [pid 6833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6838] setpgid(0, 0 [pid 6833] <... mmap resumed>) = 0x7efd7cefb000 [pid 6837] <... mprotect resumed>) = 0 [pid 6833] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 6838] <... setpgid resumed>) = 0 [pid 6833] <... mprotect resumed>) = 0 [pid 6838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6833] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6838] <... openat resumed>) = 3 [pid 6833] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5069] <... unlink resumed>) = 0 [pid 6837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6833] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} [pid 6838] write(3, "1000", 4 [pid 6833] <... clone3 resumed> => {parent_tid=[6839]}, 88) = 6839 [pid 6838] <... write resumed>) = 4 [pid 6833] rt_sigprocmask(SIG_SETMASK, [], [pid 6838] close(3 [pid 6833] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6838] <... close resumed>) = 0 [pid 6833] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] symlink("/dev/binderfs", "./binderfs" [pid 6833] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6839 attached [pid 6838] <... symlink resumed>) = 0 [pid 6837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6833] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] getdents64(3, 0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6837] <... clone3 resumed> => {parent_tid=[6840]}, 88) = 6840 ./strace-static-x86_64: Process 6840 attached [pid 6839] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6837] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] close(3 [pid 6840] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6839] <... rseq resumed>) = 0 [pid 6837] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5069] <... close resumed>) = 0 [pid 6839] set_robust_list(0x7efd7cf1b9a0, 24 [ 161.319318][ T6835] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.342661][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 161.359584][ T6835] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6837] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] <... rseq resumed>) = 0 [pid 6839] <... set_robust_list resumed>) = 0 [pid 6838] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6837] <... futex resumed>) = 0 [pid 5069] rmdir("./96" [pid 6840] <... set_robust_list resumed>) = 0 [pid 6839] rt_sigprocmask(SIG_SETMASK, [], [pid 6838] <... futex resumed>) = 0 [pid 6837] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5069] <... rmdir resumed>) = 0 [pid 6840] rt_sigprocmask(SIG_SETMASK, [], [pid 6839] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6838] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 5069] mkdir("./97", 0777 [pid 6840] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6839] creat("./file1", 000 [pid 6838] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6840] memfd_create("syzkaller", 0 [pid 6838] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5069] <... mkdir resumed>) = 0 [pid 6840] <... memfd_create resumed>) = 3 [pid 6838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6840] <... mmap resumed>) = 0x7efd74b1c000 [pid 6838] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6838] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6838] <... clone3 resumed> => {parent_tid=[6841]}, 88) = 6841 [pid 5067] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 6841 attached [pid 6838] rt_sigprocmask(SIG_SETMASK, [], [pid 5069] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6841] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6838] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5070] <... umount2 resumed>) = 0 [pid 6841] <... rseq resumed>) = 0 [pid 6838] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6841] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6838] <... futex resumed>) = 0 [pid 6841] <... set_robust_list resumed>) = 0 [pid 6838] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6841] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6839] <... creat resumed>) = 5 [pid 6839] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5069] <... openat resumed>) = 3 [pid 6833] <... futex resumed>) = 0 [pid 6841] memfd_create("syzkaller", 0) = 3 [pid 6839] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] ioctl(3, LOOP_CLR_FD [pid 6841] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5070] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6841] <... mmap resumed>) = 0x7efd74b1c000 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5070] newfstatat(AT_FDCWD, "./97/bus", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5069] close(3 [pid 5067] newfstatat(AT_FDCWD, "./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5067] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] newfstatat(4, "", [pid 6841] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6840] <... write resumed>) = 524288 [pid 5070] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... close resumed>) = 0 [pid 5067] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5069] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] getdents64(4, [pid 5070] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./95/bus" [pid 5070] <... openat resumed>) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 5070] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5069] <... clone resumed>, child_tidptr=0x555555fbc690) = 6842 [pid 5070] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 5070] getdents64(4, 0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 5070] close(4 [pid 5067] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6842 attached [pid 5070] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 161.374788][ T57] hfsplus: b-tree write err: -5, ino 4 [ 161.409506][ T6835] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6842] set_robust_list(0x555555fbc6a0, 24 [pid 5067] newfstatat(AT_FDCWD, "./95/binderfs", [pid 6842] <... set_robust_list resumed>) = 0 [pid 6842] chdir("./97" [pid 5070] rmdir("./97/bus" [pid 5067] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] unlink("./95/binderfs" [pid 5070] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5070] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 6842] <... chdir resumed>) = 0 [pid 6840] munmap(0x7efd74b1c000, 138412032 [pid 5070] newfstatat(AT_FDCWD, "./97/binderfs", [pid 5067] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5070] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6840] <... munmap resumed>) = 0 [pid 5067] close(3 [pid 6842] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] unlink("./97/binderfs" [pid 5067] <... close resumed>) = 0 [pid 5070] <... unlink resumed>) = 0 [pid 5067] rmdir("./95" [pid 6842] <... prctl resumed>) = 0 [pid 5070] getdents64(3, [pid 6842] setpgid(0, 0 [pid 6840] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5070] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 6841] <... write resumed>) = 524288 [pid 5070] close(3 [pid 5067] mkdir("./96", 0777 [pid 6842] <... setpgid resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 6842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6840] <... openat resumed>) = 4 [pid 5070] rmdir("./97" [pid 5067] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6842] <... openat resumed>) = 3 [pid 6841] munmap(0x7efd74b1c000, 138412032 [pid 5070] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 6842] write(3, "1000", 4 [pid 6841] <... munmap resumed>) = 0 [pid 5070] mkdir("./98", 0777 [pid 6842] <... write resumed>) = 4 [pid 6840] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... mkdir resumed>) = 0 [ 161.436560][ T6835] hfsplus: request for non-existent node 16715520 in B*Tree [pid 5067] ioctl(3, LOOP_CLR_FD [pid 6842] close(3 [pid 6841] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5070] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6842] <... close resumed>) = 0 [pid 6841] <... openat resumed>) = 4 [pid 5070] <... openat resumed>) = 3 [pid 6842] symlink("/dev/binderfs", "./binderfs" [pid 5067] close(3) = 0 [pid 6842] <... symlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6842] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6841] ioctl(4, LOOP_SET_FD, 3 [pid 5070] ioctl(3, LOOP_CLR_FD [pid 6842] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, NULL, 8) = 0 [pid 6840] <... ioctl resumed>) = 0 [pid 5070] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6840] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x555555fbc690) = 6843 [pid 6842] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6840] <... close resumed>) = 0 [pid 5070] close(3 [pid 6842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6840] mkdir("./bus", 0777 [pid 6842] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cf1c000 [pid 5070] <... close resumed>) = 0 [pid 6842] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6843 attached ) = 0 [pid 5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6843] set_robust_list(0x555555fbc6a0, 24 [pid 6842] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6840] <... mkdir resumed>) = 0 [pid 6843] <... set_robust_list resumed>) = 0 [pid 6843] chdir("./96") = 0 [pid 6843] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] <... clone resumed>, child_tidptr=0x555555fbc690) = 6844 [pid 6842] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 6844 attached [pid 6843] <... prctl resumed>) = 0 [pid 6840] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6843] setpgid(0, 0) = 0 [pid 6842] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6844] set_robust_list(0x555555fbc6a0, 24 [pid 6843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6841] <... ioctl resumed>) = 0 [pid 6843] <... openat resumed>) = 3 [pid 6841] close(3 [pid 6844] <... set_robust_list resumed>) = 0 [pid 6843] write(3, "1000", 4 [pid 6841] <... close resumed>) = 0 [pid 6843] <... write resumed>) = 4 [pid 6841] mkdir("./bus", 0777 [pid 6844] chdir("./98" [pid 6843] close(3 [pid 6841] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 6845 attached [pid 6844] <... chdir resumed>) = 0 [pid 6843] <... close resumed>) = 0 [pid 6841] mount("/dev/loop3", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6845] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6844] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6843] symlink("/dev/binderfs", "./binderfs" [pid 6842] <... clone3 resumed> => {parent_tid=[6845]}, 88) = 6845 [pid 6841] <... mount resumed>) = 0 [pid 6845] <... rseq resumed>) = 0 [ 161.487837][ T6840] loop0: detected capacity change from 0 to 1024 [ 161.488253][ T6835] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.508806][ T6841] loop3: detected capacity change from 0 to 1024 [pid 6844] <... prctl resumed>) = 0 [pid 6843] <... symlink resumed>) = 0 [pid 6842] rt_sigprocmask(SIG_SETMASK, [], [pid 6841] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6842] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6844] setpgid(0, 0 [pid 6842] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6842] <... futex resumed>) = 0 [pid 6845] <... set_robust_list resumed>) = 0 [pid 6844] <... setpgid resumed>) = 0 [pid 6845] rt_sigprocmask(SIG_SETMASK, [], [pid 6842] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6845] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6843] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... openat resumed>) = 3 [pid 6845] memfd_create("syzkaller", 0 [pid 6844] write(3, "1000", 4 [pid 6843] <... futex resumed>) = 0 [pid 6841] <... openat resumed>) = 3 [pid 6835] <... write resumed>) = 57344 [pid 6844] <... write resumed>) = 4 [pid 6843] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6841] chdir("./bus" [pid 6840] <... mount resumed>) = 0 [pid 6835] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] <... memfd_create resumed>) = 3 [pid 6844] close(3 [pid 6843] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6841] <... chdir resumed>) = 0 [pid 6840] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6835] <... futex resumed>) = 0 [pid 6845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6844] <... close resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6841] ioctl(4, LOOP_CLR_FD [pid 6835] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6840] <... openat resumed>) = 3 [pid 6845] <... mmap resumed>) = 0x7efd74b1c000 [pid 6844] symlink("/dev/binderfs", "./binderfs" [pid 6843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6841] <... ioctl resumed>) = 0 [pid 6843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6841] close(4 [pid 6843] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6841] <... close resumed>) = 0 [pid 6844] <... symlink resumed>) = 0 [pid 6843] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6841] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6843] <... mprotect resumed>) = 0 [pid 6841] <... futex resumed>) = 1 [pid 6838] <... futex resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_BLOCK, ~[], [pid 6841] creat("./bus", 000 [pid 6838] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6833] exit_group(0 [pid 6843] <... rt_sigprocmask resumed>[], 8) = 0 [pid 6841] <... creat resumed>) = 4 [pid 6840] chdir("./bus" [pid 6839] <... futex resumed>) = ? [pid 6838] <... futex resumed>) = 0 [pid 6844] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6835] <... futex resumed>) = ? [pid 6833] <... exit_group resumed>) = ? [pid 6844] <... futex resumed>) = 0 [pid 6843] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6840] <... chdir resumed>) = 0 [pid 6839] +++ exited with 0 +++ [pid 6838] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6835] +++ exited with 0 +++ ./strace-static-x86_64: Process 6846 attached [pid 6841] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6846] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 6843] <... clone3 resumed> => {parent_tid=[6846]}, 88) = 6846 [pid 6841] <... futex resumed>) = 0 [pid 6838] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... rseq resumed>) = 0 [pid 6843] rt_sigprocmask(SIG_SETMASK, [], [pid 6841] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6838] <... futex resumed>) = 0 [pid 6833] +++ exited with 0 +++ [pid 6840] ioctl(4, LOOP_CLR_FD [pid 6844] rt_sigaction(SIGRT_1, {sa_handler=0x7efd7cfa5fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7efd7cf97150}, [pid 6846] set_robust_list(0x7efd7cf3c9a0, 24 [pid 6844] <... rt_sigaction resumed>NULL, 8) = 0 [pid 6843] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6840] <... ioctl resumed>) = 0 [pid 6838] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6833, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 6845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6844] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 6840] close(4 [pid 6844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6846] <... set_robust_list resumed>) = 0 [pid 6844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6843] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] <... close resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 6844] <... mmap resumed>) = 0x7efd7cf1c000 [pid 6840] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] mprotect(0x7efd7cf1d000, 131072, PROT_READ|PROT_WRITE [pid 6843] <... futex resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 6844] <... mprotect resumed>) = 0 [pid 6843] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6844] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6844] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf3c990, parent_tid=0x7efd7cf3c990, exit_signal=0, stack=0x7efd7cf1c000, stack_size=0x20300, tls=0x7efd7cf3c6c0} [pid 6840] <... futex resumed>) = 1 [pid 6837] <... futex resumed>) = 0 [pid 6840] creat("./bus", 000 [pid 6837] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6846] rt_sigprocmask(SIG_SETMASK, [], [pid 6837] <... futex resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6846] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6837] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6846] memfd_create("syzkaller", 0) = 3 [pid 5066] <... openat resumed>) = 3 [pid 6846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 5066] newfstatat(3, "", ./strace-static-x86_64: Process 6847 attached [pid 6846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6844] <... clone3 resumed> => {parent_tid=[6847]}, 88) = 6847 [pid 6847] rseq(0x7efd7cf3cfe0, 0x20, 0, 0x53053053 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6847] <... rseq resumed>) = 0 [pid 5066] getdents64(3, [pid 6847] set_robust_list(0x7efd7cf3c9a0, 24) = 0 [pid 6840] <... creat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 4 entries */, 32768) = 104 [pid 6847] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6847] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6840] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6847] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6845] <... write resumed>) = 524288 [ 161.543103][ T6835] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.575599][ T6841] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6844] rt_sigprocmask(SIG_SETMASK, [], [pid 6846] <... write resumed>) = 524288 [pid 6845] munmap(0x7efd74b1c000, 138412032 [pid 6844] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 6840] <... futex resumed>) = 1 [pid 6837] <... futex resumed>) = 0 [pid 6837] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6837] <... futex resumed>) = 0 [pid 6844] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6837] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6844] <... futex resumed>) = 1 [pid 6847] <... futex resumed>) = 0 [pid 6847] memfd_create("syzkaller", 0 [pid 6844] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6847] <... memfd_create resumed>) = 3 [pid 6847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efd74b1c000 [pid 6845] <... munmap resumed>) = 0 [pid 6838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 6838] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6838] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7efd7cefb000 [pid 6838] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6838] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 6838] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0} => {parent_tid=[6848]}, 88) = 6848 [pid 6838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 6848 attached [pid 6838] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6848] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6838] <... futex resumed>) = 0 [pid 6848] <... rseq resumed>) = 0 [pid 6838] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6848] set_robust_list(0x7efd7cf1b9a0, 24) = 0 [pid 6848] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6848] creat("./file1", 000 [pid 6846] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6845] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6846] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6846] ioctl(4, LOOP_SET_FD, 3 [pid 6845] <... openat resumed>) = 4 [ 161.598575][ T2846] hfsplus: b-tree write err: -5, ino 4 [ 161.605538][ T6841] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.635076][ T6840] hfsplus: request for non-existent node 16715520 in B*Tree [pid 6845] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6847] <... write resumed>) = 524288 [pid 6847] munmap(0x7efd74b1c000, 138412032) = 0 [pid 6846] <... ioctl resumed>) = 0 [pid 6846] close(3) = 0 [pid 6846] mkdir("./bus", 0777 [pid 6847] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6846] <... mkdir resumed>) = 0 [pid 6838] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6847] <... openat resumed>) = 4 [pid 6837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6847] ioctl(4, LOOP_SET_FD, 3 [pid 6837] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... umount2 resumed>) = 0 [pid 6846] mount("/dev/loop2", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6837] <... futex resumed>) = 0 [pid 5066] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6845] close(3 [pid 6837] <... mmap resumed>) = 0x7efd7cefb000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6845] <... close resumed>) = 0 [pid 6837] mprotect(0x7efd7cefc000, 131072, PROT_READ|PROT_WRITE [pid 5066] newfstatat(AT_FDCWD, "./98/bus", [pid 6837] <... mprotect resumed>) = 0 [pid 6845] mkdir("./bus", 0777 [pid 6837] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6837] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5066] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6837] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7efd7cf1b990, parent_tid=0x7efd7cf1b990, exit_signal=0, stack=0x7efd7cefb000, stack_size=0x20300, tls=0x7efd7cf1b6c0}./strace-static-x86_64: Process 6849 attached => {parent_tid=[6849]}, 88) = 6849 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6849] rseq(0x7efd7cf1bfe0, 0x20, 0, 0x53053053 [pid 6845] <... mkdir resumed>) = 0 [pid 6837] rt_sigprocmask(SIG_SETMASK, [], [pid 5066] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6849] <... rseq resumed>) = 0 [pid 6837] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 161.638574][ T6841] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.655409][ T6846] loop2: detected capacity change from 0 to 1024 [ 161.662406][ T6845] loop4: detected capacity change from 0 to 1024 [ 161.666722][ T6841] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.671493][ T6840] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.686978][ T6847] loop5: detected capacity change from 0 to 1024 [pid 6849] set_robust_list(0x7efd7cf1b9a0, 24 [pid 6845] mount("/dev/loop4", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6837] futex(0x7efd7d0086d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... openat resumed>) = 4 [pid 6847] <... ioctl resumed>) = 0 [pid 6847] close(3) = 0 [pid 6837] <... futex resumed>) = 0 [pid 6849] <... set_robust_list resumed>) = 0 [pid 6837] futex(0x7efd7d0086dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] newfstatat(4, "", [pid 6849] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6847] mkdir("./bus", 0777 [pid 6846] <... mount resumed>) = 0 [pid 6845] <... mount resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 6847] <... mkdir resumed>) = 0 [pid 6847] mount("/dev/loop5", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME, "" [pid 6849] creat("./file1", 000 [pid 6845] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] getdents64(4, 0x555555fc5770 /* 2 entries */, 32768) = 48 [pid 6845] <... openat resumed>) = 3 [pid 6846] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6845] chdir("./bus" [pid 5066] getdents64(4, [pid 6846] <... openat resumed>) = 3 [pid 6845] <... chdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555555fc5770 /* 0 entries */, 32768) = 0 [pid 6849] <... creat resumed>) = 5 [pid 6846] chdir("./bus" [pid 6845] ioctl(4, LOOP_CLR_FD [ 161.722451][ T6840] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.740246][ T6840] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.752453][ T6841] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.762265][ T6848] ------------[ cut here ]------------ [pid 5066] close(4 [pid 6849] futex(0x7efd7d0086dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... chdir resumed>) = 0 [pid 6845] <... ioctl resumed>) = 0 [pid 6841] <... write resumed>) = 57344 [pid 6840] <... write resumed>) = 57344 [pid 6837] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... close resumed>) = 0 [pid 6849] <... futex resumed>) = 0 [ 161.764191][ T6840] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.767961][ T6848] WARNING: CPU: 1 PID: 6848 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x3d7/0x520 [ 161.775355][ T6840] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.782975][ T6841] hfsplus: request for non-existent node 16715520 in B*Tree [ 161.785794][ T6848] Modules linked in: [ 161.804017][ T6848] CPU: 1 PID: 6848 Comm: syz-executor922 Not tainted 6.7.0-rc2-syzkaller-00195-g0f5cc96c367f #0 [pid 6846] ioctl(4, LOOP_CLR_FD [pid 6845] close(4 [pid 6841] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6840] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] rmdir("./98/bus" [ 161.814534][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 161.824696][ T6848] RIP: 0010:hfsplus_free_extents+0x3d7/0x520 [ 161.830715][ T6848] Code: 2f ff 8b 44 24 04 85 c0 0f 84 34 fe ff ff e8 90 65 2f ff 48 c7 c7 60 b0 e7 8a e8 c4 40 12 ff e9 1e fe ff ff e8 7a 65 2f ff 90 <0f> 0b 90 e9 b5 fc ff ff e8 6c 65 2f ff 8b 14 24 8b 74 24 04 48 8b [ 161.850454][ T6848] RSP: 0018:ffffc9000af9f780 EFLAGS: 00010293 [ 161.856644][ T6848] RAX: 0000000000000000 RBX: ffff8880294b9558 RCX: ffffffff8257178b [ 161.864705][ T6848] RDX: ffff888029658000 RSI: ffffffff82571ad6 RDI: 0000000000000001 [pid 6849] futex(0x7efd7d0086d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6847] <... mount resumed>) = 0 [pid 6846] <... ioctl resumed>) = 0 [pid 6845] <... close resumed>) = 0 [pid 6841] <... futex resumed>) = 0 [pid 6840] <... futex resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 6847] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6846] close(4 [pid 6845] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6841] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6840] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6837] exit_group(0 [pid 5066] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6849] <... futex resumed>) = ? [pid 6847] <... openat resumed>) = 3 [pid 6846] <... close resumed>) = 0 [pid 6845] <... futex resumed>) = 1 [pid 6842] <... futex resumed>) = 0 [pid 6837] <... exit_group resumed>) = ? [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6849] +++ exited with 0 +++ [pid 6847] chdir("./bus" [pid 6846] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6845] creat("./bus", 000 [pid 6842] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] newfstatat(AT_FDCWD, "./98/binderfs", [pid 6847] <... chdir resumed>) = 0 [pid 6846] <... futex resumed>) = 1 [pid 6845] <... creat resumed>) = 4 [pid 6843] <... futex resumed>) = 0 [pid 6842] <... futex resumed>) = 0 [pid 5066] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 6847] ioctl(4, LOOP_CLR_FD [pid 6846] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6847] <... ioctl resumed>) = 0 [pid 6847] close(4) = 0 [pid 5066] unlink("./98/binderfs" [pid 6847] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... unlink resumed>) = 0 [pid 6847] <... futex resumed>) = 1 [pid 6844] <... futex resumed>) = 0 [pid 5066] getdents64(3, [pid 6847] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6844] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... getdents64 resumed>0x555555fbd730 /* 0 entries */, 32768) = 0 [pid 6847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6844] <... futex resumed>) = 0 [pid 6843] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] close(3 [pid 6847] creat("./bus", 000 [pid 6846] <... futex resumed>) = 0 [pid 6844] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6843] <... futex resumed>) = 1 [pid 5066] <... close resumed>) = 0 [pid 6847] <... creat resumed>) = 4 [pid 6846] creat("./bus", 000 [pid 5066] rmdir("./98" [pid 6847] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6846] <... creat resumed>) = 4 [pid 6843] futex(0x7efd7d0086cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... rmdir resumed>) = 0 [pid 6847] <... futex resumed>) = 1 [pid 6846] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6844] <... futex resumed>) = 0 [pid 6843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6845] futex(0x7efd7d0086cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] mkdir("./99", 0777 [pid 6847] futex(0x7efd7d0086c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6846] <... futex resumed>) = 0 [pid 6845] <... futex resumed>) = 1 [pid 6844] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6843] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6842] <... futex resumed>) = 0 [ 161.872735][ T6848] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 161.880752][ T6848] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000278e0001 [ 161.888811][ T6848] R13: 0000000000000000 R14: ffff888076e38000 R15: dffffc0000000000 [ 161.896863][ T6848] FS: 00007efd7cf1b6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 161.905961][ T6848] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.912613][ T6848] CR2: 00007efd7cf3d000 CR3: 00000000210ca000 CR4: 00000000003506f0 [pid 6847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6846] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6845] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 6844] <... futex resumed>) = 0 [pid 6843] <... futex resumed>) = 0 [pid 6842] futex(0x7efd7d0086c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... mkdir resumed>) = 0 [ 161.920635][ T6848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 161.928820][ T6848] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 161.936929][ T6848] Call Trace: [ 161.940234][ T6848] [ 161.943238][ T6848] ? show_regs+0x8f/0xa0 [ 161.947520][ T6848] ? __warn+0xe6/0x390 [ 161.951736][ T6848] ? hfsplus_free_extents+0x3d7/0x520 [ 161.957142][ T6848] ? report_bug+0x3bc/0x580 [ 161.961759][ T6848] ? handle_bug+0x3d/0x70 [ 161.966124][ T6848] ? exc_invalid_op+0x17/0x40 [ 161.970836][ T6848] ? asm_exc_invalid_op+0x1a/0x20 [ 161.975998][ T6848] ? hfsplus_free_extents+0x8b/0x520 [ 161.981349][ T6848] ? hfsplus_free_extents+0x3d6/0x520 [ 161.986749][ T6848] ? hfsplus_free_extents+0x3d7/0x520 [ 161.992212][ T6848] hfsplus_file_truncate+0x832/0x9d0 [ 161.997531][ T6848] ? __up_read+0x1fc/0x760 [ 162.002050][ T6848] ? hfsplus_get_block+0x9e0/0x9e0 [ 162.007368][ T6848] ? inode_newsize_ok+0x13c/0x200 [ 162.012491][ T6848] hfsplus_setattr+0x1eb/0x310 [ 162.017299][ T6848] ? hfsplus_file_fsync+0x5d0/0x5d0 [ 162.022613][ T6848] notify_change+0x742/0x11c0 [ 162.027327][ T6848] do_truncate+0x15c/0x220 [ 162.031863][ T6848] ? file_open_root+0x450/0x450 [ 162.036764][ T6848] path_openat+0x25a0/0x2c50 [ 162.041547][ T6848] ? path_lookupat+0x770/0x770 [ 162.046357][ T6848] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 162.052439][ T6848] do_filp_open+0x1de/0x430 [ 162.056986][ T6848] ? may_open_dev+0xf0/0xf0 [ 162.061599][ T6848] ? find_held_lock+0x2d/0x110 [ 162.066412][ T6848] ? _raw_spin_unlock+0x28/0x40 [ 162.071438][ T6848] ? alloc_fd+0x2da/0x6c0 [ 162.075813][ T6848] do_sys_openat2+0x176/0x1e0 [ 162.080528][ T6848] ? build_open_flags+0x690/0x690 [ 162.085773][ T6848] ? ptrace_notify+0xf4/0x130 [ 162.090494][ T6848] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 162.096454][ T6848] __x64_sys_creat+0xcd/0x120 [ 162.100183][ T6846] hfsplus: request for non-existent node 16715520 in B*Tree [ 162.101171][ T6848] ? __x64_compat_sys_openat+0x200/0x200 [ 162.101203][ T6848] ? _raw_spin_unlock_irq+0x2e/0x50 [ 162.101229][ T6848] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 162.101261][ T6848] do_syscall_64+0x40/0x110 [ 162.115984][ T6845] hfsplus: request for non-existent node 16715520 in B*Tree [ 162.119375][ T6848] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 162.126927][ T6847] hfsplus: request for non-existent node 16715520 in B*Tree [ 162.130121][ T6848] RIP: 0033:0x7efd7cf7fb89 [ 162.143414][ T6846] hfsplus: request for non-existent node 16715520 in B*Tree [ 162.143723][ T6846] hfsplus: request for non-existent node 16715520 in B*Tree [ 162.150687][ T6848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 162.189560][ T6848] RSP: 002b:00007efd7cf1b218 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 162.190823][ T6847] hfsplus: request for non-existent node 16715520 in B*Tree [ 162.198071][ T6848] RAX: ffffffffffffffda RBX: 00007efd7d0086d8 RCX: 00007efd7cf7fb89 [ 162.198093][ T6848] RDX: 00007efd7cf59146 RSI: 0000000000000000 RDI: 00000000200000c0 [ 162.198111][ T6848] RBP: 00007efd7d0086d0 R08: 00007ffdf1c16727 R09: 0000000000000000 [ 162.198129][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd7cfd40c0 [ 162.198145][ T6848] R13: 0073756c70736668 R14: 0031656c69662f2e R15: 6465646165726874 [ 162.198168][ T6848] [ 162.198181][ T6848] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 162.198191][ T6848] CPU: 1 PID: 6848 Comm: syz-executor922 Not tainted 6.7.0-rc2-syzkaller-00195-g0f5cc96c367f #0 [ 162.198215][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 162.198229][ T6848] Call Trace: [ 162.198238][ T6848] [ 162.198245][ T6848] dump_stack_lvl+0xd9/0x1b0 [ 162.198275][ T6848] panic+0x6dc/0x790 [ 162.198304][ T6848] ? panic_smp_self_stop+0xa0/0xa0 [ 162.198331][ T6848] ? show_trace_log_lvl+0x363/0x4f0 [ 162.198363][ T6848] ? check_panic_on_warn+0x1f/0xb0 [ 162.198392][ T6848] ? hfsplus_free_extents+0x3d7/0x520 [ 162.198415][ T6848] check_panic_on_warn+0xab/0xb0 [ 162.198443][ T6848] __warn+0xf2/0x390 [ 162.198471][ T6848] ? hfsplus_free_extents+0x3d7/0x520 [ 162.198493][ T6848] report_bug+0x3bc/0x580 [ 162.198517][ T6848] handle_bug+0x3d/0x70 [ 162.198543][ T6848] exc_invalid_op+0x17/0x40 [ 162.198570][ T6848] asm_exc_invalid_op+0x1a/0x20 [ 162.198611][ T6848] RIP: 0010:hfsplus_free_extents+0x3d7/0x520 [ 162.198636][ T6848] Code: 2f ff 8b 44 24 04 85 c0 0f 84 34 fe ff ff e8 90 65 2f ff 48 c7 c7 60 b0 e7 8a e8 c4 40 12 ff e9 1e fe ff ff e8 7a 65 2f ff 90 <0f> 0b 90 e9 b5 fc ff ff e8 6c 65 2f ff 8b 14 24 8b 74 24 04 48 8b [ 162.198659][ T6848] RSP: 0018:ffffc9000af9f780 EFLAGS: 00010293 [ 162.198679][ T6848] RAX: 0000000000000000 RBX: ffff8880294b9558 RCX: ffffffff8257178b [ 162.198695][ T6848] RDX: ffff888029658000 RSI: ffffffff82571ad6 RDI: 0000000000000001 [ 162.198711][ T6848] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 162.198725][ T6848] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000278e0001 [ 162.198740][ T6848] R13: 0000000000000000 R14: ffff888076e38000 R15: dffffc0000000000 [ 162.198758][ T6848] ? hfsplus_free_extents+0x8b/0x520 [ 162.198780][ T6848] ? hfsplus_free_extents+0x3d6/0x520 [ 162.198806][ T6848] hfsplus_file_truncate+0x832/0x9d0 [ 162.198830][ T6848] ? __up_read+0x1fc/0x760 [ 162.198858][ T6848] ? hfsplus_get_block+0x9e0/0x9e0 [ 162.198882][ T6848] ? inode_newsize_ok+0x13c/0x200 [ 162.198907][ T6848] hfsplus_setattr+0x1eb/0x310 [ 162.198943][ T6848] ? hfsplus_file_fsync+0x5d0/0x5d0 [ 162.198977][ T6848] notify_change+0x742/0x11c0 [ 162.199001][ T6848] do_truncate+0x15c/0x220 [ 162.199036][ T6848] ? file_open_root+0x450/0x450 [ 162.199072][ T6848] path_openat+0x25a0/0x2c50 [ 162.199106][ T6848] ? path_lookupat+0x770/0x770 [ 162.199138][ T6848] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 162.199173][ T6848] do_filp_open+0x1de/0x430 [ 162.199205][ T6848] ? may_open_dev+0xf0/0xf0 [ 162.199236][ T6848] ? find_held_lock+0x2d/0x110 [ 162.199269][ T6848] ? _raw_spin_unlock+0x28/0x40 [ 162.199291][ T6848] ? alloc_fd+0x2da/0x6c0 [ 162.199316][ T6848] do_sys_openat2+0x176/0x1e0 [ 162.199340][ T6848] ? build_open_flags+0x690/0x690 [ 162.199362][ T6848] ? ptrace_notify+0xf4/0x130 [ 162.199387][ T6848] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 162.199422][ T6848] __x64_sys_creat+0xcd/0x120 [ 162.199445][ T6848] ? __x64_compat_sys_openat+0x200/0x200 [ 162.199469][ T6848] ? _raw_spin_unlock_irq+0x2e/0x50 [ 162.199492][ T6848] ? syscall_trace_enter.constprop.0+0xaf/0x1e0 [ 162.199524][ T6848] do_syscall_64+0x40/0x110 [ 162.199549][ T6848] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 162.199582][ T6848] RIP: 0033:0x7efd7cf7fb89 [ 162.199607][ T6848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 162.199629][ T6848] RSP: 002b:00007efd7cf1b218 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 162.199652][ T6848] RAX: ffffffffffffffda RBX: 00007efd7d0086d8 RCX: 00007efd7cf7fb89 [ 162.199668][ T6848] RDX: 00007efd7cf59146 RSI: 0000000000000000 RDI: 00000000200000c0 [ 162.199684][ T6848] RBP: 00007efd7d0086d0 R08: 00007ffdf1c16727 R09: 0000000000000000 [ 162.199699][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efd7cfd40c0 [ 162.199714][ T6848] R13: 0073756c70736668 R14: 0031656c69662f2e R15: 6465646165726874 [ 162.199734][ T6848] [ 162.205668][ T6848] Kernel Offset: disabled